Apptio

Monitoring and alerts are configured by the security team to identify and notify management of incidents when thresholds are crossed on security and operational metrics. Issues, if any, are routed through incident management for resolution.

Processing capacity is monitored monthly by management to ensure that current system performance meets operational requirements.

Compliance Scorecard's clients are provided onboarding materials that details security, availability, and regulatory related requirements, platform access information, and incident escalation information.

Agreements with Vendors and Business Partners include privacy and confidentially clauses. If any of the vendors are SaaS, then their respective SOC1/2 reports are obtained and reviewed periodically.

PR.PS-01: Configuration management practices are established and applied

PR.PS-02: Software is maintained, replaced, and removed commensurate with risk

Provides definitions of key terms used in the regulation.

Steps for handling ICT-related incidents.

Criteria for categorizing incidents by severity.

Expands the Solvency II framework to address digital resilience in insurance.