System Operations

Overview:To meet its objectives, the entity uses detection and monitoring procedures to identify (1) changes to configurations that result in the introduction of new vulnerabilities, and (2) susceptibilities to newly discovered vulnerabilities.... Read More

Overview:The entity evaluates security events to determine whether they could or have resulted in a failure of the entity to meet its objectives (security incidents) and, if so, takes actions to prevent or address such failures. Action Items:1)... Read More

Overview:The entity identifies, develops, and implements activities to recover from identified security incidents. Action Items:1) Create an escalation procedure and publish on the company intranet for employees to access and review.2) Create an... Read More

Overview:The entity responds to identified security incidents by executing a defined incident response program to understand, contain, remediate, and communicate security incidents, as appropriate. Action Items:1) Create an escalation procedure and... Read More

Overview:The entity monitors system components and the operation of those components for anomalies that are indicative of malicious acts, natural disasters, and errors affecting the entity's ability to meet its objectives; anomalies are analyzed... Read More