ScalePad Backup Radar

Security Policies and Operational Procedures (3.7)

Generation of Strong Cryptographic Keys (3.6.1)

Managing PAN Data Storage (3.4)

5. 24 Information security incident management planning and preparation - The organization shall plan and prepare for managing information security incidents by defining, establishing, and communicating information security incident management processes, roles, and responsibilities.

5.29 Information security during disruption - The organization shall plan how to maintain information security at an appropriate level during disruption.

Does your incident response plan address the following areas: Documentation and reporting regarding security events and related incident response activities, and the evaluation and revision as necessary of the incident response plan following a security event?

Does your incident response plan address the following areas:The goals of the incident response plan, The internal processes for responding to a security event, The definition of clear roles, responsibilities, and levels of decision-making authority?

Does your incident response plan address the following areas: External and internal communications and information sharing, and Identification of requirements for the remediation of any identified weaknesses in information systems and associated controls?

Defines requirements for detecting ICT anomalies.

54