Gluu

Firewall and Router Configuration Standards (1.1)

Changing Vendor-supplied Defaults (2.1)

Change management policies are established that include procedures for tracking, testing, approving, and communicating changes. Policies are reviewed annually.

System change requests are reviewed and approved by management to ensure alignment with business objectives and security requirements.

All system changes, including their review, approval, and evidence of adherence to the Change Management Policy, are documented in Jira to maintain a centralized and auditable record.

DE.AE-02: Potentially adverse events are analyzed to better understand associated activities

DE.AE-08: Incidents are declared when adverse events meet the defined incident criteria

GV.RR-01: Organizational leadership is responsible and accountable for cybersecurity risk and fosters a culture that is risk-aware, ethical, and continually improving

PR.DS-01: The confidentiality, integrity, and availability of data-at-rest are protected

PR.DS-02: The confidentiality, integrity, and availability of data-in-transit are protected

Does the monitoring and testing include continuous monitoring or periodic penetration testing and vulnerability assessments?

Sets out coordinated testing protocols with authorities.

Perform Automated Backups