|
+ID.IM-02 Improvements are identified from security tests and exercises, including those done in coordination with suppliers and relevant third parties |
ID.IM-02 Improvements are identified from security tests and exercises, including those done in coordination with suppliers and relevant third partiesStatementImprovements are identified from security tests and exercises, including those done in coordination with suppliers and relevant third parties GuidanceIdentify improvements for future incident response activities based on findings from incident response assessments (e.g., tabletop exercises and simulations, tests, internal reviews, independent audits) GuidanceIdentify improvements for future business continuity, disaster recovery, and incident response activities based on exercises performed in coordination with critical service providers and product suppliers GuidanceInvolve internal stakeholders (e.g., senior executives, legal department, HR) in security tests and exercises as appropriate GuidancePerform penetration testing to identify opportunities to improve the security posture of selected high-risk systems as approved by leadership GuidanceExercise contingency plans for responding to and recovering from the discovery that products or services did not originate with the contracted supplier or partner or were altered before receipt GuidanceCollect and analyze performance metrics using security tools and services to inform improvements to the cybersecurity program 1. Ħarsa ġenerali
1.1 Referenzi1.2 Rekwiżiti identifikati1.3 Regolamenti relatati2. Rekwiżiti identifikati
3. Regolamenti relatati
Kwistjonijiet marbuta |