Cyren

Responding to Change-detection Alerts (11.5.1)

Intrusion-detection/intrusion-prevention (11.4)

GV.OC-03: Legal, regulatory, and contractual requirements regarding cybersecurity - including privacy and civil liberties obligations - are understood and managed

RS.AN-03: Analysis is performed to establish what has taken place during an incident and the root cause of the incident

6.3 Information security awareness, education , and training - Personnel of the organization and relevant interested parties shall receive appropriate information security awareness, education and training and regular updates of the organization's information security policy, topic-specific policies, and procedures, as relevant for their job function.

6.7 Remote Working - Security measures shall be implemented when personnel are working remotely to protect information accessed, processed, or stored outside the organization's premises.

6.8 Information security event reporting - The organization shall provide a mechanism for personnel to report observed or suspected information security events through appropriate channels in a timely manner.

Address Unauthorized Assets

Address Unauthorized Software