UniFi Access

Verifying User Identities (8.2.2)

User Authentication Management (8.2)

MFA for non-console access to CDE (8.3.1)

User ID Management (8.1.2)

Use of Other Authentication Mechanisms (8.6)

Policies and Procedures for User Identification Management (8.1)

Revoking Access for Terminated Users (8.1.3)

Inventory of Authorized Wireless Access Points (11.1.1)

Removing/disabling Inactive User Accounts (8.1.4)

Vulnerability Scanning (11.2)

Defined roles and responsibilities are established within the organization, including specific assignments for critical functions, and are documented to ensure clarity of accountability.

Organizational structures and defined roles are maintained in the platform and made available to employees upon request to ensure accessibility and transparency.

ID.IM-01: Improvements are identified from evaluations

ID.IM-02: Improvements are identified from security tests and exercises, including those done in coordination with suppliers and relevant third parties

ID.IM-04: Incident response plans and other cybersecurity plans that affect operations are established, communicated, maintained, and improved

Have you?implemented multi-factor authentication for any individual accessing any information system, unless your Qualified Individual has approved in writing the use of reasonably equivalent or more secure access controls?

Have you developed, implemented, and currently maintain procedures for the secure disposal of customer information in any format no later than two years after the last date the information is used in connection with the provision of a product or service to the customer to which it relates?

Do you regularly test or otherwise monitor the effectiveness of the safeguards' key controls, systems, and procedures, including those to detect actual and attempted attacks on, or intrusions into, information systems?

Amends existing laws to align with DORA.

Centralize Network Authentication, Authorization, and Auditing (AAA)

Use of Secure Network Management and Communication Protocols

Ensure Remote Devices Utilize a VPN and are Connecting to an Enterprise???s AAA Infrastructure