Carbonite Endpoint

Verifying User Identities (8.2.2)

User ID Management (8.1.2)

Policies and Procedures for User Identification Management (8.1)

Monitoring and alerts are configured by the security team to identify and notify management of incidents when thresholds are crossed on security and operational metrics. Issues, if any, are routed through incident management for resolution.

Alerts are configured to notify operations personnel of capacity issues, enabling timely response to potential system performance or availability risks.

GV.OV-01: Cybersecurity risk management strategy outcomes are reviewed to inform and adjust strategy and direction

GV.OV-02: The cybersecurity risk management strategy is reviewed and adjusted to ensure coverage of organizational requirements and risks

GV.OV-03: Organizational cybersecurity risk management performance is evaluated and reviewed for adjustments needed

RC.RP-01: The recovery portion of the incident response plan is executed once initiated from the incident response process

RC.RP-02: Recovery actions are selected, scoped, prioritized, and performed

RS.CO-02: Internal and external stakeholders are notified of incidents

RS.CO-03: Information is shared with designated internal and external stakeholders

Protect Recovery Data

Establish and Maintain an Isolated Instance of Recovery Data

What measures are in place to protect sensitive employee and customer data from unauthorized access or data breaches? (Data Security and Privacy)

What measures are in place to address the risk of employee misconduct or non-compliance with policies and regulations? (Employee Misconduct)

How does the organization manage the risk of employee turnover and its impact on business operations? (Employee Turnover)