Information Utility Programs Are utilities that can significantly Security Access manage virtualized partitions (ex. shutdown, clone, etc.) appropriately restricted and monitored? Information Do you have Security (describe/explain/attach/embed associated documents) a capability to detect attacks which target the virtual infrastructure directly (ex. shimming, Blue Pill, Hyper jumping, etc.)? Information Are attacks that target the virtual Security infrastructure prevented with technical controls? Legal Legal Nondisclosure Are requirements for non-disclosure Agreements or confidentiality agreements reflecting the organization's needs for the protection of data and operational details identified, documented and reviewed at planned intervals? Legal Third Party Do you select and monitor Agreements outsourced providers to verify that they comply with laws in the country where the data is processed and stored and transmitted? Legal Do you select and monitor outsourced providers in compliance with laws in the country where the data originates? Legal Does legal counsel review all third party agreements?
Information Security Utility Programs Access Are utilities that can significantly manage virtualized partitions (ex. shutdown, clone, etc.) appropriately restricted and monitored? Information Security Do you have (describe/explain/attach/embed associated documents) a capability to detect attacks which target the virtual infrastructure directly (ex. shimming, Blue Pill, Hyper jumping, etc.)? Information Security Are attacks that target the virtual infrastructure prevented with technical controls? Legal Legal Nondisclosure Agreements Are requirements for non-disclosure or confidentiality agreements reflecting the organization's needs for the protection of data and operational details identified, documented and reviewed at planned intervals? Legal Third Party Agreements Do you select and monitor outsourced providers to verify that they comply with laws in the country where the data is processed and stored and transmitted? Legal Do you select and monitor outsourced providers in compliance with laws in the country where the data originates? Legal Does legal counsel review all third party agreements?
405329717.docx