NetXMS

Firewall and Router Configuration Standards (1.1)

Administering User Accounts (12.5.4)

Current Network Diagram (1.1.2)

DE.CM-03: Personnel activity and technology usage are monitored to find potentially adverse events

GV.RM-03: Cybersecurity risk management activities and outcomes are included in enterprise risk management processes

ID.AM-01: Inventories of hardware managed by the organization are maintained

ID.AM-08: Systems, hardware, software, services, and data are managed throughout their life cycles

ID.RA-01: Vulnerabilities in assets are identified, validated, and recorded

6.3 Information security awareness, education , and training - Personnel of the organization and relevant interested parties shall receive appropriate information security awareness, education and training and regular updates of the organization's information security policy, topic-specific policies, and procedures, as relevant for their job function.

Explains proportional application of DORA based on entity type.

53

How does the board monitor the organization's compliance with relevant cybersecurity regulations and standards? (Monitoring compliance with regulations)

What measures are in place to assess and manage cybersecurity risks at the organizational level? (Existence and effectiveness of risk assessment measures)