Parsec

Firewall and Router Configuration Standards (1.1)

Restricting Inbound and Outbound Traffic (1.2.1)

Documenting Security Policies and Firewall Management (1.5)

Training 5 - Does training include explaining security event reporting - who to contact and what to do in case of suspicious activity?

Training 1 - Are all workforce members (including managers) given cyber, digital, and/or information security training, at least annually?

Have you designed and implemented information safeguards to control the risks you identify through risk assessment, and regularly test or otherwise monitor the effectiveness of the safeguards' key controls, systems, and procedures?

Do you currently Identify and manage the data, personnel, devices, systems, and facilities that enable you to achieve business purposes in accordance with their relative importance to business objectives and your risk strategy?

Do you periodically review your data retention poicy to minimiz the unnecessary retention of data?

Information exchange between competent authorities.

How does the board monitor the organization's compliance with relevant cybersecurity regulations and standards? (Monitoring compliance with regulations)

What measures are in place to assess and manage cybersecurity risks at the organizational level? (Existence and effectiveness of risk assessment measures)