CyberSaint

DE.CM-01: Networks and network services are monitored to find potentially adverse events

ID.IM-01: Improvements are identified from evaluations

ID.IM-02: Improvements are identified from security tests and exercises, including those done in coordination with suppliers and relevant third parties

ID.IM-03: Improvements are identified from execution of operational processes, procedures, and activities

5.1 Information security policy and topic-specific policies shall be defined, approved by management, published, communicated to, and acknowledged by relevant personnel and relevant interested parties, and reviewed at planned intervals and if significant changes occur

5.19 Information Security in Supplier relationships - Processes and procedures shall be defined and implemented to manage the information security risks associated with the use of suppliers' products or services.

5.2 Information security roles and responsibilities shall be defined and allocated according to the organization needs.

5. 24 Information security incident management planning and preparation - The organization shall plan and prepare for managing information security incidents by defining, establishing, and communicating information security incident management processes, roles, and responsibilities.

5.25 Assessment and decision on information security events - The organization shall assess information security events and decide if they are to be categorized as information security incidents.

55

Perform Automated Backups

Conduct Post-Incident Reviews