Arctic Wolf Managed Security Awareness

Public-facing Web Applications (6.6)

Broken Authentication and Session Management (6.5.10)

Improper Error Handling (6.5.5)

Policies and Procedures (6.7)

Developing Internal and External Software Applications (6.3)

Documented Change Approval (6.4.5.2)

Policies and Procedures for Protecting Against Malware (5.4)

GV.OV-01: Cybersecurity risk management strategy outcomes are reviewed to inform and adjust strategy and direction

GV.OV-02: The cybersecurity risk management strategy is reviewed and adjusted to ensure coverage of organizational requirements and risks

PR.IR-01: Networks and environments are protected from unauthorized logical access and usage

PR.IR-03: Mechanisms are implemented to achieve resilience requirements in normal and adverse situations

RS.CO-02: Internal and external stakeholders are notified of incidents

RS.CO-03: Information is shared with designated internal and external stakeholders

Have you Implemented policies and procedures to ensure that personnel are able to enact your information security program by verifying that key information security personnel take steps to maintain current knowledge of changing information security threats and countermeasures?

Have you Implemented policies and procedures to ensure that personnel are able to enact your information security program by providing information security personnel with security updates and training sufficient to address relevant security risks?