44 Vulnerability assessments are performed by Have independent experts review critical independent third parties at regular intervals, systems for known vulnerabilities to reduce covering all of the organization’s key systems, likelihood of internal or external compromise. based on its threat model. 45 Vulnerability and threat data are tracked via a Activities related to vulnerability and threat formal risk register, and the organization tracks management are formally and and manages its response to published tracked across the organization. vulnerabilities. 46 The logging and monitoring functions are used to Enhance the situational awareness specific to specifically understand the organization’s cyber cyber security, enabling effective security security posture and operations in near real time, countermeasures if required. including information from external sources. 47 Escalations of cyber security events are used to Leverage escalations to further enhance the support near real-time situational awareness and situational awareness of the organization’s analyze / correlate to provide insight over time. current cyber security posture. 25 Cyber security incidents are handled in Ensure proper of serious incidents and coordination with external parties when preserve evidence. appropriate, such as law enforcement and government agencies. The table below outlines the activities and controls that are currently missing from the operational risk plan of the organization. Each activity row includes columns that describe the plan to implement the activity, the schedule for implementation, and the party responsible for its implementation and maintenance. Activity / Security Existing Guideline Deviation Accept or Responsible Party Estimated Mitigation Strategy Control Mitigate Completion Risk Date
44 Vulnerability assessments are performed by independent third parties at regular intervals, covering all of the organization’s key systems, based on its threat model. Have independent experts review critical systems for known vulnerabilities to reduce likelihood of internal or external compromise. 45 Vulnerability and threat data are tracked via a formal risk register, and the organization tracks and manages its response to published vulnerabilities. Activities related to vulnerability and threat management are formally and tracked across the organization. 46 The logging and monitoring functions are used to specifically understand the organization’s cyber security posture and operations in near real time, including information from external sources. Enhance the situational awareness specific to cyber security, enabling effective security countermeasures if required. 47 Escalations of cyber security events are used to support near real-time situational awareness and analyze / correlate to provide insight over time. Leverage escalations to further enhance the situational awareness of the organization’s current cyber security posture. 25 Cyber security incidents are handled in coordination with external parties when appropriate, such as law enforcement and government agencies. Ensure proper of serious incidents and preserve evidence. The table below outlines the activities and controls that are currently missing from the operational risk plan of the organization. Each activity row includes columns that describe the plan to implement the activity, the schedule for implementation, and the party responsible for its implementation and maintenance. Activity / Security Control Existing Guideline Deviation Accept or Mitigate Risk Responsible Party Estimated Completion Date Mitigation Strategy
2014-Coop-Cyber-Security-Plan-Template-Update-1.docx