Each password shall be changed R5.3.3. N/A N/A N/A N/A at least annually, or more frequently based on risk. Security Status Monitoring — R6. N/A N/A N/A The Responsible Entity The Responsible Entity shall as technically feasible, ensure that all Cyber Assets did not implement within the Electronic Security automated tools or Perimeter, as technically feasible, organizational process implement automated tools or controls, to monitor organizational process controls to system events that are monitor system events that are related to cyber related to cyber security. security on one or more of Cyber Assets inside the Electronic Security Perimeter(s). The Responsible Entity shall R6.1. N/A N/A N/A The Responsible Entity implement and document the did not implement or organizational processes and did not document the technical and procedural organizational mechanisms for monitoring for processes and technical security events on all Cyber and procedural Assets within the Electronic mechanisms for Security Perimeter. monitoring for security events on all Cyber Assets within the Electronic Security Perimeter. The security monitoring controls R6.2. N/A N/A N/A The Responsible shall issue automated or manual entity's security alerts for detected Cyber Security monitoring controls do Incidents. not issue automated or manual alerts for detected Cyber Security Incidents. The Responsible Entity shall R6.3. N/A N/A N/A The Responsible Entity maintain logs of system events did not maintain logs of related to cyber security, where system events related
R5.3.3. Each password shall be changed at least annually, or more frequently based on risk. N/A N/A N/A N/A R6. Security Status Monitoring — The Responsible Entity shall ensure that all Cyber Assets within the Electronic Security Perimeter, as technically feasible, implement automated tools or organizational process controls to monitor system events that are related to cyber security. N/A N/A N/A The Responsible Entity as technically feasible, did not implement automated tools or organizational process controls, to monitor system events that are related to cyber security on one or more of Cyber Assets inside the Electronic Security Perimeter(s). R6.1. The Responsible Entity shall implement and document the organizational processes and technical and procedural mechanisms for monitoring for security events on all Cyber Assets within the Electronic Security Perimeter. N/A N/A N/A The Responsible Entity did not implement or did not document the organizational processes and technical and procedural mechanisms for monitoring for security events on all Cyber Assets within the Electronic Security Perimeter. R6.2. The security monitoring controls shall issue automated or manual alerts for detected Cyber Security Incidents. N/A N/A N/A The Responsible entity's security monitoring controls do not issue automated or manual alerts for detected Cyber Security Incidents. R6.3. The Responsible Entity shall maintain logs of system events related to cyber security, where N/A N/A N/A The Responsible Entity did not maintain logs of system events related
VSL_Matrix_Complete_2016_01_27.docx