Asigra

Prevention of Unauthorized Substitution of Cryptographic Keys (3.6.7)

Cryptographic Key Changes (3.6.4)

Administering User Accounts (12.5.4)

Access and Authentication with Disk Encryption (3.4.1)

Transmission of Unprotected PANs By End-user Messaging Technologies (4.2)

Restricting Access to Cryptographic Keys (3.5.2)

Security Policies and Operational Procedures (3.7)

Managing Service Providers (12.8)

Monitoring and Controlling All Access to Data (12.5.5)

Document and Implement Key Management Processes and Procedures (3.6)

Wireless Networks Transmitting Cardholder Data (4.1.1)

Managing PAN Data Storage (3.4)

RS.AN-03: Analysis is performed to establish what has taken place during an incident and the root cause of the incident

RS.AN-06: Actions performed during an investigation are recorded, and the records' integrity and provenance are preserved

RS.AN-07: Incident data and metadata are collected, and their integrity and provenance are preserved

3rd Party Access Controls 2 - Are there procedures for terminating or changing 3rd party access when the BAA, contract, or relationship ends or changes?

Business Agreements 2 - Is there a Business Agreement in place with each partner, contractor, and vendor that ensures disclosure if the 3rd party experiences a cyber attack, data breach, of other security event?

3rd Party Access Controls 1 - Are unique credentials used for 3rd party, partner, contractor, and/or vendor access to systems that connect to the organization's domain?

Have you designated an employee or employees to coordinate your information security program?

Have you currently Designated a qualified individual responsible for overseeing and implementing your information security program and enforcing your information security program? The Qualified Individual may be employed by you, an affiliate, or a service provider.

Have you designated a senior member of your personnel responsible for direction and oversight of the Qualified Individual?

Have you identified reasonably foreseeable internal and external risks to the security, confidentiality, and integrity of customer information that could result in the unauthorized compromise of such information, and assessed the sufficiency of any safeguards in place to control these risks?

How is the sales team supported and trained to effectively handle sales objections and negotiations? (Sales Objections and Negotiations)

How does the organization manage the risk of fluctuating sales performance? (Sales Performance Fluctuation)

What measures are in place to mitigate the risk of losing key clients or accounts? (Client Loss)

Cloud service customers must ensure that public-facing domain ownership, registrar controls, and DNS management are governed with documented accountability.