LogMeIn Rescue

Firewall and Router Configuration Standards (1.1)

Segregate Cardholder Data Environment on Internal Network Zone (1.3.6)

Documentation of All Services, Protocols, and Ports Allowed (1.1.6)

Restricting Inbound and Outbound Traffic (1.2.1)

Documenting Security Policies and Firewall Management (1.5)

Change management policies are established that include procedures for tracking, testing, approving, and communicating changes. Policies are reviewed annually.

All system change requests are formally documented, including a description of the change, justification, and affected systems or components.

All system changes, including their review, approval, and evidence of adherence to the Change Management Policy, are documented in Jira to maintain a centralized and auditable record.

DE.CM-01: Networks and network services are monitored to find potentially adverse events

DE.CM-03: Personnel activity and technology usage are monitored to find potentially adverse events

DE.CM-06: External service provider activities and services are monitored to find potentially adverse events

PR.PS-04: Log records are generated and made available for continuous monitoring

PR.PS-05: Installation and execution of unauthorized software are prevented

RS.MA-01: The incident response plan is executed in coordination with relevant third parties once an incident is declared

RS.MA-02: Incident reports are triaged and validated

RS.MA-03: Incidents are categorized and prioritized

RS.MA-04: Incidents are escalated or elevated as needed

RS.MA-05: The criteria for initiating incident recovery are applied

Outlines ICT governance roles for senior management.

Details structural organization to manage ICT risk.

Sets out coordinated testing protocols with authorities.