CloudEndure

Production Data for Development (6.4.3)

Public-facing Web Applications (6.6)

Installing Critical Security Patches (6.2)

Developing Internal and External Software Applications (6.3)

Change Control Processes and Procedures (6.4)

A business impact analysis (BIA) is performed annually that includes tabletop testing of the business continuity and disaster recovery plans.

PR.DS-11: Backups of data are created, protected, maintained, and tested

Does your incident response plan address the following areas: Documentation and reporting regarding security events and related incident response activities, and the evaluation and revision as necessary of the incident response plan following a security event?

Does your incident response plan address the following areas:The goals of the incident response plan, The internal processes for responding to a security event, The definition of clear roles, responsibilities, and levels of decision-making authority?

Does your incident response plan address the following areas: External and internal communications and information sharing, and Identification of requirements for the remediation of any identified weaknesses in information systems and associated controls?

Allows voluntary reports of cyber threats.

53

Expands the Solvency II framework to address digital resilience in insurance.