SEC01-BP08 Evaluate and implement new security services and features regularly
Review new security services and features from the provider and partners on a regular cadence and adopt those that improve the workload's security posture.
3
artefacts
1
held by a system
2
at each review
moderate
to go live
SIEM / log platform
where the evidence lives
teal = a system already holds it · olive = produced at each review
system holds itEvidence a system already holds
- Backlog or decision log of features evaluated with adopt or defer rationale · SIEM / log platform
periodic reviewEvidence produced at each review
- Cadence and minutes of the security service review · Vendor register / contract repository
- Record of features adopted and the posture change measured · Document repository
governing documentDocuments that govern the control
none for this control
First move
Start with the 1 of 3 artefacts that already live in a system (SIEM / log platform); keep the periodic reviews but log each one as a dated record with a named reviewer.
Common gaps auditors find
- security tooling frozen at launch architecture
- no owner for evaluating new provider capabilities
- adoption decisions taken with no recorded rationale
Do this for your whole sheet
Paste the rows you run your controls from and get this mapping for every control at once, with the periodic-review ones flagged and a first move per row. No account for the first run.
Build my evidence sheetSEC01-BP07 Identify threats and prioritize mitigations using a threat model · SEC02-BP01 Use strong sign-in mechanisms