CylancePROTECT

Staff Training for Breach Response (12.10.4)

Acceptable Uses of Technology (12.3.5)

Personnel Education (12.6.1)

Policies and Procedures for Protecting Against Malware (5.4)

Anti-virus Maintenance (5.2)

GV.RM-03: Cybersecurity risk management activities and outcomes are included in enterprise risk management processes

GV.RM-04: Strategic direction that describes appropriate risk response options is established and communicated

RS.MA-01: The incident response plan is executed in coordination with relevant third parties once an incident is declared

RS.MA-02: Incident reports are triaged and validated

RS.MA-03: Incidents are categorized and prioritized

RS.MA-04: Incidents are escalated or elevated as needed

RS.MA-05: The criteria for initiating incident recovery are applied

Does the monitoring and testing include continuous monitoring or periodic penetration testing and vulnerability assessments?

Do you conduct Annual penetration testing of your information systems, determined each give year based on relevant identified rusisk in accordance with the risk assessment?

Do you Evaluate and adjust your IS program in light of the results of the testing and monitoring including any material changes to your operations or business arrangements or any other circumstances that you know or have reason to know may have a material impact on your IS program?

Do you conduct vulnerability assessments whenever there are material changes to your operations or business arrangements and whenever there are circumstances you know or have reason to know may have a material impact on your information security program?

Sets out coordinated testing protocols with authorities.

Establish and Maintain Detailed Enterprise Asset Inventory

Ensure Authorized Software is Currently Supported