Domotz Remote Management

5.15 Access Control - Rules to control physical and logical access to information and other associated assets shall be established and implemented based on business and information security requirements.

5.16 Identity Management - The full lifecycle of identities shall be managed.

5. 24 Information security incident management planning and preparation - The organization shall plan and prepare for managing information security incidents by defining, establishing, and communicating information security incident management processes, roles, and responsibilities.

5.29 Information security during disruption - The organization shall plan how to maintain information security at an appropriate level during disruption.

7.4 Physical security monitoring - Premises shall be continuously monitored for unauthorized physical access.

7.5 Protecting against physical and environmental threats - Protection against physical and environmental threats, such as natural disasters and other intentional or unintentional physical threats to infrastructure shall be designed and implemented.

Does the report include the overall status of the IS program and compliance, and matters related to the program addressing issues such as risk assessment/mgmt and control decisions,service provider arrangements,testing results,security events/violations and mgmt's responses, and recommended changes?

Do you require your Qualified Individual to report in writing, regularly and at least annually, to your board of directors or equivalent governing body.

Securely Manage Network Infrastructure

Centralize Network Authentication, Authorization, and Auditing (AAA)

Use of Secure Network Management and Communication Protocols

Change-control processes and procedures are followed for all changes to system components.