Information Do you ensure that security threat Security detection systems that use signatures, lists, or behavioral patterns are updated across all infrastructure components within industry accepted timeframes? Information Incident Do you have Security Management (describe/explain/attach/embed associated documents) a documented security incident response plan? Information Do you integrate customized tenant Security requirements into your security incident response plans? Information Do you publish a roles and Security responsibilities document specifying what you vs. your tenants are responsible for during security incidents? Information Incident Reporting Does your security information and Security event management (SIEM) system merge data sources (app logs, firewall logs, IDS logs, physical access logs, etc.) for granular analysis and alerting? Information Does your logging and monitoring Security framework allow isolation of an incident to specific tenants? Information Incident Response Does your incident response plan Security Legal Preparation comply with industry standards for legally admissible chain-of-custody management processes & controls? Information Does your incident response Security capability include the use of legally admissible forensic data collection and analysis techniques? Information Are you capable of supporting Security litigation holds (freeze of data from a specific point in time) for a specific
Information Security Do you ensure that security threat detection systems that use signatures, lists, or behavioral patterns are updated across all infrastructure components within industry accepted timeframes? Information Security Incident Management Do you have (describe/explain/attach/embed associated documents) a documented security incident response plan? Information Security Do you integrate customized tenant requirements into your security incident response plans? Information Security Do you publish a roles and responsibilities document specifying what you vs. your tenants are responsible for during security incidents? Information Security Incident Reporting Does your security information and event management (SIEM) system merge data sources (app logs, firewall logs, IDS logs, physical access logs, etc.) for granular analysis and alerting? Information Security Does your logging and monitoring framework allow isolation of an incident to specific tenants? Information Security Incident Response Legal Preparation Does your incident response plan comply with industry standards for legally admissible chain-of-custody management processes & controls? Information Security Does your incident response capability include the use of legally admissible forensic data collection and analysis techniques? Information Security Are you capable of supporting litigation holds (freeze of data from a specific point in time) for a specific
405329717.docx