Aruba Central

ID.IM-01: Improvements are identified from evaluations

ID.IM-02: Improvements are identified from security tests and exercises, including those done in coordination with suppliers and relevant third parties

ID.IM-04: Incident response plans and other cybersecurity plans that affect operations are established, communicated, maintained, and improved

PR.AA-01: Identities and credentials for authorized users, services, and hardware are managed by the organization

PR.AA-05: Access permissions, entitlements, and authorizations are defined in a policy, managed, enforced, and reviewed, and incorporate the principles of least privilege and separation of duties

Creates an EU-level oversight structure for critical vendors.

Grants oversight authorities various supervisory rights.

Establish and Maintain Detailed Enterprise Asset Inventory

Use Dynamic Host Configuration Protocol (DHCP) Logging to Update Enterprise Asset Inventory

Establish and Maintain a Software Inventory

Ensure Authorized Software is Currently Supported

Establish and Maintain an Inventory of Service Providers

Change-control processes and procedures are followed for all changes to system components.