TeamViewer Tensor

Change-control processes and procedures are followed for all changes to system components.

Personnel Education (12.6.1)

Monitoring and Controlling All Access to Data (12.5.5)

Compliance Scorecard performs and/or contracts with third parties to perform vulnerability scans & penetration tests at least annually. Issues, if any, are routed through incident and risk management processes for resolution.

Antivirus software is installed on workstations, laptops, and systems supporting such software.

GV.OC-02: Internal and external stakeholders are understood, and their needs and expectations regarding cybersecurity risk management are understood and considered

GV.OC-03: Legal, regulatory, and contractual requirements regarding cybersecurity - including privacy and civil liberties obligations - are understood and managed

GV.PO-01: Policy for managing cybersecurity risks is established based on organizational context, cybersecurity strategy, and priorities and is communicated and enforced

GV.PO-02: Policy for managing cybersecurity risks is reviewed, updated, communicated, and enforced to reflect changes in requirements, threats, technology, and organizational mission

RS.MA-01: The incident response plan is executed in coordination with relevant third parties once an incident is declared

RS.MA-03: Incidents are categorized and prioritized

RS.MA-04: Incidents are escalated or elevated as needed

RS.MA-05: The criteria for initiating incident recovery are applied

Allows voluntary reports of cyber threats.

Utilize an Active Discovery Tool

Utilize Automated Software Inventory Tools

Log Sensitive Data Access

Tune Security Event Alerting Thresholds