Zoom Meetings

Changing Vendor-supplied Defaults (2.1)

Removing Unnecessary Functionality (2.2.5)

Enabling Only Necessary Services (2.2.2)

Formal organizational structures, including governance frameworks and reporting lines, are established and documented to ensure clear accountability and operational efficiency.

New employees are required to read and formally acknowledge understanding of the company???s security policies during the onboarding process.

All employees are required to reaffirm their understanding of and compliance with company security policies on an annual basis.

Organizational structures and defined roles are maintained in the platform and made available to employees upon request to ensure accessibility and transparency.

PR.PS-01: Configuration management practices are established and applied

PR.PS-02: Software is maintained, replaced, and removed commensurate with risk

PR.PS-05: Installation and execution of unauthorized software are prevented

Defines requirements for detecting ICT anomalies.

Defines ESAs??? supervisory and coordinating roles.

Clarifies ECB involvement in oversight activities.