JumpCloud SSO

Administering User Accounts (12.5.4)

Personnel Education (12.6.1)

Monitoring and Controlling All Access to Data (12.5.5)

GV.OV-01: Cybersecurity risk management strategy outcomes are reviewed to inform and adjust strategy and direction

GV.OV-02: The cybersecurity risk management strategy is reviewed and adjusted to ensure coverage of organizational requirements and risks

GV.OV-03: Organizational cybersecurity risk management performance is evaluated and reviewed for adjustments needed

Address Unauthorized Assets

Address Unauthorized Software

Designate Personnel to Manage Incident Handling

Assign Key Roles and Responsibilities

How does the board monitor the organization's compliance with relevant cybersecurity regulations and standards? (Monitoring compliance with regulations)

Are regular internal or external cybersecurity audits or assessments conducted, and how are the findings communicated and addressed? (Frequency and follow-up on cybersecurity audits)

How are IT systems monitored, maintained, and protected against potential failures? (IT Systems Failure)

How frequently does the board receive updates on the organization's current cyber threat landscape and potential vulnerabilities? (Frequency of threat landscape updates)

What measures are in place to assess and manage cybersecurity risks at the organizational level? (Existence and effectiveness of risk assessment measures)

How does the organization monitor and ensure compliance with relevant regulations? (Regulatory Compliance Failure)