Carbon Black Defense

Policies and Procedures (11.6)

DE.AE-02: Potentially adverse events are analyzed to better understand associated activities

DE.AE-03: Information is correlated from multiple sources

DE.AE-04: The estimated impact and scope of adverse events are understood

DE.AE-06: Information on adverse events is provided to authorized staff and tools

DE.AE-08: Incidents are declared when adverse events meet the defined incident criteria

ID.AM-01: Inventories of hardware managed by the organization are maintained

ID.AM-02: Inventories of software, services, and systems managed by the organization are maintained

ID.AM-08: Systems, hardware, software, services, and data are managed throughout their life cycles

RC.CO-03: Recovery activities and progress in restoring operational capabilities are communicated to designated internal and external stakeholders

RC.CO-04: Public updates on incident recovery are shared using approved methods and messaging

Brings market infrastructures under DORA???s incident management and ICT governance frameworks.

Establish and Maintain a Secure Configuration Process

Establish and Maintain an Incident Response Process

How are IT systems monitored, maintained, and protected against potential failures? (IT Systems Failure)

How does the organization monitor and ensure compliance with relevant regulations? (Regulatory Compliance Failure)