Cisco Secure Endpoint

Verifying User Identities (8.2.2)

Responding to Change-detection Alerts (11.5.1)

Unique User IDs (8.1.1)

Change-detection Alerts (11.5)

MFA for non-console access to CDE (8.3.1)

Revoking Access for Terminated Users (8.1.3)

Removing/disabling Inactive User Accounts (8.1.4)

Vulnerability Scanning (11.2)

Change management policies are established that include procedures for tracking, testing, approving, and communicating changes. Policies are reviewed annually.

All system change requests are formally documented, including a description of the change, justification, and affected systems or components.

6.3 Information security awareness, education , and training - Personnel of the organization and relevant interested parties shall receive appropriate information security awareness, education and training and regular updates of the organization's information security policy, topic-specific policies, and procedures, as relevant for their job function.

Have you Evaluated and adjusted your information security program in light of the results of the testing and monitoring required, or any material changes to your operations or business arrangements due to the results of risk assessments performed?

Address Unauthorized Assets

Address Unauthorized Software

Define Mechanisms for Communicating During Incident Response

How are IT systems monitored, maintained, and protected against potential failures? (IT Systems Failure)

What measures are in place to assess and manage cybersecurity risks at the organizational level? (Existence and effectiveness of risk assessment measures)