BitSight

External Vulnerability Scanning (11.2.2)

Vulnerability Scanning (11.2)

Access to client data requires a unique ID assigned to each user.

The virtual firewall is equipped with intrusion detection and prevention system capabilities to identify and block malicious network-based activity or abuse of cloud assets.

The virtual firewall is configured to log alerts for suspicious activity, including potential security events or incidents.

Logged alerts are reviewed and investigated as needed to identify, respond to, and mitigate suspicious or malicious activity.

All access requests, including those for employees, temporary employees, consultants, and system accounts, are reviewed and approved by the appropriate level of business and IT management before provisioning.

Monitoring and alerts are configured by the security team to identify and notify management of incidents when thresholds are crossed on security and operational metrics. Issues, if any, are routed through incident management for resolution.

Reported client incidents are resolved through documented communication via the client portal and Jira ticketing system to ensure timely and accurate resolution.

Compliance Scorecard's clients are provided onboarding materials that details security, availability, and regulatory related requirements, platform access information, and incident escalation information.

Objective descriptions of Compliance Scorecard's system and its boundaries are made available to authorized client users through ongoing communications and the client portal.

GV.OV-01: Cybersecurity risk management strategy outcomes are reviewed to inform and adjust strategy and direction

GV.OV-02: The cybersecurity risk management strategy is reviewed and adjusted to ensure coverage of organizational requirements and risks

ID.IM-01: Improvements are identified from evaluations

ID.IM-02: Improvements are identified from security tests and exercises, including those done in coordination with suppliers and relevant third parties

ID.IM-03: Improvements are identified from execution of operational processes, procedures, and activities

ID.IM-04: Incident response plans and other cybersecurity plans that affect operations are established, communicated, maintained, and improved

8.1 User end point devices - Information stored on, processed by or accessible via user endpoint devices shall be protected.

8.21 Security of network services - Security mechanisms, service levels, and service requirements of network services shall be identified, implemented, and monitored.