Retrospect

Protection of Audit Trail Files (10.5.2)

Administering User Accounts (12.5.4)

File-integrity Monitoring On Logs (10.5.5)

Anti-virus Capabilities (5.1.1)

Logging Audit Trails (10.2.3)

Type of Event is Logged (10.3.2)

Success or Failure Indication is Logged (10.3.4)

DE.CM-01: Networks and network services are monitored to find potentially adverse events

ID.AM-01: Inventories of hardware managed by the organization are maintained

PR.PS-01: Configuration management practices are established and applied

RS.MI-01: Incidents are contained

Have you designed and implemented information safeguards to control the risks you identify through risk assessment, and regularly test or otherwise monitor the effectiveness of the safeguards' key controls, systems, and procedures?

Do you Design and implement safeguards to Limit authorized users' access only to customer information that they need to perform their duties or, in the case of customers, to access their own information?

Regular reports to national regulators.

Utilize an Active Discovery Tool

Use a Passive Asset Discovery Tool