RMM Central

Access and Authentication with Disk Encryption (3.4.1)

MFA is enabled on all production servers or in all environments where changes can be promoted.

GV.RM-03: Cybersecurity risk management activities and outcomes are included in enterprise risk management processes

RC.CO-03: Recovery activities and progress in restoring operational capabilities are communicated to designated internal and external stakeholders

Have you designed and implemented information safeguards to control the risks you identify through risk assessment, and regularly test or otherwise monitor the effectiveness of the safeguards' key controls, systems, and procedures?

Do you currently Identify and manage the data, personnel, devices, systems, and facilities that enable you to achieve business purposes in accordance with their relative importance to business objectives and your risk strategy?

Do you periodically review your data retention poicy to minimiz the unnecessary retention of data?

Does the monitoring and testing include continuous monitoring or periodic penetration testing and vulnerability assessments?

Do you design and implement safeguards to control the risks you identity through risk assessment, including by Implementing and periodically reviewing access controls, including technical and, as appropriate, physical controls to both?

Brings market infrastructures under DORA???s incident management and ICT governance frameworks.