Mindmap
Dominios de control - 2a Parte (CCM)
Inhalt der Mindmap
Dominios de control - 2a Parte (CCM)
Application & Interface Security
- Application Security
- Customer Access Requirements
- Data Integrity
- Data Security / Integrity
Audit Assurance & Compliance
- Audit Planning
- Independent Audits
- Information System Regulatory Mapping
Business Continuity Management & Operational Resilience
- Business Continuity Planning
- Business Continuity Testing
- Datacenter Utilities / Environmental Conditions
- Documentation
- Environmental Risks
- Equipment Location
- Equipment Maintenance
- Equipment Power Failures
- Impact Analysis
- Policy
- Retention Policy
Change Control & Configuration Management
- New Development / Acquisition
- Outsourced Development
- Quality Testing
- Unauthorized Software Installations
- Production Changes
Data Security & Information Lifecycle Management
- Ecommerce Transactions
- Data Inventory / Flows
- Classification
- Handling / Labeling / Security Policy
- Non-Production Data
- Ownership / Stewardship
- Secure Disposal
Datacenter Security
- Asset Management
- Controlled Access Points
- Off-Site Authorization
- Policy
- Equipment Identification
- Unauthorized Persons Entry
- Off-Site Equipment
- User Access
- Secure Area Authorization
Encryption & Key Management
- Entitlement
- Key Generation
- Sensitive Data Protection
- Storage and Access
Governance and Risk Management
- Data Focus Risk Assessments
- Management Oversight
- Policy Enforcement
- Baseline Requirements
- Policy
- Management Support/Involvement
- Management Program
- Policy Impact on Risk Assessments
- Policy Reviews
- Risk Assessments
- Risk Management Framework
Human Resources
- Asset Returns
- Background Screening
- Employment Agreements
- Employment Termination
- Mobile Device Management
- Non-Disclosure Agreements
- Roles / Responsibilities
- Technology Acceptable Use
- Training / Awareness
- User Responsibility
- Workspace
Identity & Access Management
- Audit Tools Access
- Credential Lifecycle / Provision Management
- Diagnostic / Configuration Ports Access
- Policies and Procedures
- Segregation of Duties
- Source Code Access Restriction
- Third Party Access
- Trusted Sources
- User Access Authorization
- User Access Reviews
- User Access Revocation
- User ID Credentials
- Utility Programs Access
Infrastructure & Virtualization Security
- Audit Logging / Intrusion Detection
- Change Detection
- Clock Synchronization
- Information System Documentation
- Vulnerability Management
- Network Security
- OS Hardening and Base Controls
- Production / Non-Production Environments
- Segmentation
- VM Security - Data Protection
- Hypervisor Hardening
- Wireless Security
- Network Architecture
Interoperability & Portability
- APIs
- Data Request
- Policy & Legal
- Standardized Network Protocols
- Virtualization
Mobile Security
- Anti-Malware
- Application Stores
- Approved Applications
- Approved Software for BYOD
- Awareness and Training
- Cloud Based Services
- Compatibility
- Device Eligibility
- Device Inventory
- Device Management
- Encryption
- Jailbreaking and Rooting
- Legal
- Lockout Screen
- Operating Systems
- Passwords
- Policy
- Remote Wipe
- Security Patches
- Users
Security Incident Management, E-Discovery, & Cloud Forensics
- Contact / Authority Maintenance
- Incident Management
- Incident Reporting
- Incident Response Legal Preparation
- Incident Response Metrics
Supply Chain Management, Transparency, and Accountability
- Data Quality and Integrity
- Incident Reporting
- Network / Infrastructure Services
- Provider Internal Assessments
- Supply Chain Agreements
- Supply Chain Governance Reviews
- Supply Chain Metrics
- Third Party Assessment
- Third Party Audits
Threat and Vulnerability Management
- Anti-Virus / Malicious Software
- Vulnerability / Patch Management
- Mobile Code
Informationen
- Beschreibung
- Juan Carlos Dominguez Cuevas
- Erstellt von
- JUAN CARLOS DOMINGUEZ CUEVAS · Jun 2018
- Aktualisiert
- 15 Jun 2018
- Aufrufe
- 9
- Bewertung