Malwarebytes

Changing Vendor-supplied Defaults (2.1)

Minimizing Cardholder Data Storage (3.1)

Security Policies and Operational Procedures (3.7)

Removing Unnecessary Functionality (2.2.5)

DE.CM-01: Networks and network services are monitored to find potentially adverse events

DE.CM-03: Personnel activity and technology usage are monitored to find potentially adverse events

GV.PO-01: Policy for managing cybersecurity risks is established based on organizational context, cybersecurity strategy, and priorities and is communicated and enforced

GV.PO-02: Policy for managing cybersecurity risks is reviewed, updated, communicated, and enforced to reflect changes in requirements, threats, technology, and organizational mission

RS.AN-03: Analysis is performed to establish what has taken place during an incident and the root cause of the incident

RS.AN-06: Actions performed during an investigation are recorded, and the records' integrity and provenance are preserved

RS.AN-07: Incident data and metadata are collected, and their integrity and provenance are preserved

Remediation Documentation - Provide documentation of planned or on-going remediation from recent assessments. This may include Corrective Action Plans, remediation plans, or checklists that address identified vulnerabilities found in recent SRAs.

Ensures fund managers also comply with digital operational resilience obligations.

Establish and Maintain Detailed Enterprise Asset Inventory

Establish and Maintain a Software Inventory

Ensure Authorized Software is Currently Supported

Centrally Manage Anti-Malware Software