|
+RA-03(03) Dynamic Threat Awareness |
RA-03(03) Dynamic Threat AwarenessControlDetermine the current cyber threat environment on an ongoing basis using [Assignement: means].DiscussionThe threat awareness information that is gathered feeds into the organization’s information security operations to ensure that procedures are updated in response to the changing threat environment. For example, at higher threat levels, organizations may change the privilege or authentication thresholds required to perform certain operations.Assessment Objectivethe current cyber threat environment is determined on an ongoing basis using [Assignement: means].Assessment MethodExamineRisk assessment policy security planning policy and procedures procedures addressing organizational assessments of risk risk assessment risk assessment results risk assessment reviews risk assessment updates risk reports system security plan other relevant documents or recordsInterviewOrganizational personnel with risk assessment responsibilities organizational personnel with security responsibilities1. Ħarsa ġenerali
1.1 Referenzi1.2 Rekwiżiti identifikati1.3 Regolamenti relatati2. Rekwiżiti identifikati
3. Regolamenti relatati
Kwistjonijiet marbuta
|