Cisco Meraki MR

Changing Vendor Defaults in Wireless Environments (2.1.1)

Enabling Only Necessary Services (2.2.2)

Compliance Scorecard performs and/or contracts with third parties to perform vulnerability scans & penetration tests at least annually. Issues, if any, are routed through incident and risk management processes for resolution.

Antivirus software is installed on workstations, laptops, and systems supporting such software.

GV.PO-01: Policy for managing cybersecurity risks is established based on organizational context, cybersecurity strategy, and priorities and is communicated and enforced

GV.PO-02: Policy for managing cybersecurity risks is reviewed, updated, communicated, and enforced to reflect changes in requirements, threats, technology, and organizational mission

8.1 User end point devices - Information stored on, processed by or accessible via user endpoint devices shall be protected.

8.12 Data leakage prevention - Data leakage prevention measures shall be applied to systems, networks and any other devices that process, store, or transmit sensitive information.

8.21 Security of network services - Security mechanisms, service levels, and service requirements of network services shall be identified, implemented, and monitored.

8.22 Segregation of networks - Groups of information services, users, and information systems shall be segregated in the organization's networks.

8.23 Web filtering - Access to external websites shall be managed to reduce exposure to malicious content.

8.24 Use of cryptography - Rules for the effective use of cryptography, including cryptographic key management, shall be defined, and implemented.

Steps for handling ICT-related incidents.

Criteria for categorizing incidents by severity.