|
+PM-16(01) Automated Means for Sharing Threat Intelligence |
PM-16(01) Automated Means for Sharing Threat IntelligenceControlEmploy automated mechanisms to maximize the effectiveness of sharing threat intelligence information.DiscussionTo maximize the effectiveness of monitoring, it is important to know what threat observables and indicators the sensors need to be searching for. By using well-established frameworks, services, and automated tools, organizations improve their ability to rapidly share and feed the relevant threat detection signatures into monitoring tools.Assessment Objectiveautomated mechanisms are employed to maximize the effectiveness of sharing threat intelligence information.Assessment MethodExamineInformation security program plan privacy program plan threat awareness program policy threat awareness program procedures risk assessment results related to threat awareness documentation about the cross-organization information-sharing capability other relevant documents or recordsInterviewOrganizational personnel with information security and privacy program planning and plan implementation responsibilities organizational personnel responsible for the threat awareness program organizational personnel responsible for the cross-organization information-sharing capability organizational personnel with information security and privacy responsibilities external personnel with whom threat awareness information is shared by the organization1. Преглед
1.1 Препратки1.2 Идентифицирани изисквания1.3 Свързани регулации2. Идентифицирани изисквания
3. Свързани регулации
Свързани задачи
|