CC6.1 Vulnerabilities of system components to [insert Vulnerabilities that could lead to a breach or Logging and monitoring software is used to the principle(s) reported on; for example, incident are not detected in a timely manner. collect data from system infrastructure security, availability, processing integrity, and components and endpoint systems and used to confidentiality] breaches and incidents due to monitor system performance, potential security malicious acts, natural disasters, or errors are threats and vulnerabilities, resource utilization, monitored and evaluated and countermeasures and to detect unusual system activity or service are implemented to compensate for known and requests. This software sends a message to the new vulnerabilities. operations center and security organization and automatically opens a priority incident or problem ticket and change management system record item. Call center personnel receive telephone and requests for support, which may include requests to reset user passwords or notify entity personnel of potential breaches and incidents. Call center personnel follow defined protocols for recording, resolving, and escalating received requests. CC6.2 [Insert the principle(s) being reported on; for Breaches and incidents are not identified, Operations personnel follow defined protocols for example, security, availability, processing prioritized, or evaluated for impact. evaluating reported events. Security related integrity, and confidentiality] incidents, including events are assigned to the security group for logical and physical security breaches, failures, evaluation concerns, and other complaints are identified, reported to appropriate personnel, and acted on in accordance with established incident response procedures. Corrective measures to address breaches and Operations and security personnel follow defined incidents are not implemented in a timely protocols for resolving and escalating reported manner. events.
CC6.1 Vulnerabilities of system components to [insert the principle(s) reported on; for example, security, availability, processing integrity, and confidentiality] breaches and incidents due to malicious acts, natural disasters, or errors are monitored and evaluated and countermeasures are implemented to compensate for known and new vulnerabilities. Vulnerabilities that could lead to a breach or incident are not detected in a timely manner. Logging and monitoring software is used to collect data from system infrastructure components and endpoint systems and used to monitor system performance, potential security threats and vulnerabilities, resource utilization, and to detect unusual system activity or service requests. This software sends a message to the operations center and security organization and automatically opens a priority incident or problem ticket and change management system record item. Call center personnel receive telephone and requests for support, which may include requests to reset user passwords or notify entity personnel of potential breaches and incidents. Call center personnel follow defined protocols for recording, resolving, and escalating received requests. CC6.2 [Insert the principle(s) being reported on; for example, security, availability, processing integrity, and confidentiality] incidents, including logical and physical security breaches, failures, concerns, and other complaints are identified, reported to appropriate personnel, and acted on in accordance with established incident response procedures. Breaches and incidents are not identified, prioritized, or evaluated for impact. Operations personnel follow defined protocols for evaluating reported events. Security related events are assigned to the security group for evaluation Corrective measures to address breaches and incidents are not implemented in a timely manner. Operations and security personnel follow defined protocols for resolving and escalating reported events.
AICPA-FINAL-ED-Trust-Services-Principles.docx