Domotz Network Monitoring

Changing Vendor-supplied Defaults (2.1)

Changing Vendor Defaults in Wireless Environments (2.1.1)

DE.AE-02: Potentially adverse events are analyzed to better understand associated activities

DE.AE-03: Information is correlated from multiple sources

DE.AE-04: The estimated impact and scope of adverse events are understood

DE.AE-06: Information on adverse events is provided to authorized staff and tools

PR.IR-01: Networks and environments are protected from unauthorized logical access and usage

PR.IR-03: Mechanisms are implemented to achieve resilience requirements in normal and adverse situations

PR.IR-04: Adequate resource capacity to ensure availability is maintained

8.1 User end point devices - Information stored on, processed by or accessible via user endpoint devices shall be protected.

8.12 Data leakage prevention - Data leakage prevention measures shall be applied to systems, networks and any other devices that process, store, or transmit sensitive information.

8.21 Security of network services - Security mechanisms, service levels, and service requirements of network services shall be identified, implemented, and monitored.

8.22 Segregation of networks - Groups of information services, users, and information systems shall be segregated in the organization's networks.

Does the monitoring and testing include continuous monitoring or periodic penetration testing and vulnerability assessments?

Do you conduct Annual penetration testing of your information systems, determined each give year based on relevant identified rusisk in accordance with the risk assessment?

Do you Evaluate and adjust your IS program in light of the results of the testing and monitoring including any material changes to your operations or business arrangements or any other circumstances that you know or have reason to know may have a material impact on your IS program?

Do you conduct vulnerability assessments whenever there are material changes to your operations or business arrangements and whenever there are circumstances you know or have reason to know may have a material impact on your information security program?

Regular reports to national regulators.

Defines the scope of digital resilience testing.

Expands the Solvency II framework to address digital resilience in insurance.

Brings IORPs (occupational pension funds) under the scope of ICT risk regulation.