Aruba Access Points

Policies and Procedures for Encrypting Transmissions of Cardholder Data (4.3)

Enabling Only Necessary Services (2.2.2)

Wireless Networks Transmitting Cardholder Data (4.1.1)

Configuring System Security Parameters to Prevent Misuse (2.2.4)

GV.PO-01: Policy for managing cybersecurity risks is established based on organizational context, cybersecurity strategy, and priorities and is communicated and enforced

GV.PO-02: Policy for managing cybersecurity risks is reviewed, updated, communicated, and enforced to reflect changes in requirements, threats, technology, and organizational mission

ID.AM-01: Inventories of hardware managed by the organization are maintained

ID.AM-02: Inventories of software, services, and systems managed by the organization are maintained

ID.AM-05: Assets are prioritized based on classification, criticality, resources, and impact on the mission

RS.MA-01: The incident response plan is executed in coordination with relevant third parties once an incident is declared

RS.MA-02: Incident reports are triaged and validated

RS.MA-03: Incidents are categorized and prioritized

RS.MA-04: Incidents are escalated or elevated as needed

RS.MA-05: The criteria for initiating incident recovery are applied

Expands the Solvency II framework to address digital resilience in insurance.

Establish and Maintain Detailed Enterprise Asset Inventory

Use Dynamic Host Configuration Protocol (DHCP) Logging to Update Enterprise Asset Inventory

Establish and Maintain a Software Inventory

Establish and Maintain an Inventory of Service Providers