+Managing Vulnerabilities, Malfunctions and Errors - Concept

Managing Vulnerabilities, Malfunctions and Errors - Concept

Guidelines and instructions with technical and organisational measures are documented, communicated and provided in accordance with SP-01 to ensure the timely identification and addressing of vulnerabilities in the system components used to provide the cloud service. These guidelines and instructions contain specifications regarding the following aspects:
• Regular identification of vulnerabilities;
• Assessment of the severity of identified vulnerabilities;
• Prioritisation and implementation of actions to promptly remediate or mitigate identified vulnerabilities based on severity and according to defined timelines; and
• Handling of system components for which no measures are initiated for the timely remediation or mitigation of vulnerabilities.
Additonal Criteria-
Supplementary Information - About the CriteriaIdentified vulnerabilities can be classified according to established metrics such as CVSS or OWASP. The decision not to remediate or mitigate identified vulnerabilities must be made by the Cloud Service Provider based on a risk assessment. If necessary, risk-compensating measures must be taken.

1. Apžvalga

1.1 Nuorodos

1.2 Nustatyti reikalavimai

1.3 Susiję teisės aktai

2. Nustatyti reikalavimai

Reikalavimai

3. Susiję teisės aktai

Teisės aktai