PM-16 Threat Awareness Program. Implement a threat awareness program that includes a cross-organization information-sharing capability for threat intelligence
Threat Awareness Program. Implement a threat awareness program that includes a cross-organization information-sharing capability for threat intelligence.
system holds itEvidence a system already holds
none for this control
periodic reviewEvidence produced at each review
- Records of threat intelligence received and disseminated during the period · Document repository
- Evidence threat intelligence changed something, such as a control adjustment or a hunt initiated · Document repository
governing documentDocuments that govern the control
- The threat awareness programme documentation, including its scope and intended audience · HR system / LMS
- The cross organisation information sharing capability used for threat intelligence, and the partners it connects · Document repository
- Handling rules governing the sensitivity and permitted onward sharing of received intelligence · Document repository
First move
Common gaps auditors find
- Feeds subscribed to and ingested with no analysis, so intelligence never reaches a decision
- Sharing capability receives only, contributing nothing back to the community the control envisages
- Traffic light or equivalent handling markings ignored, risking the sharing relationship
Do this for your whole sheet
Paste the rows you run your controls from and get this mapping for every control at once, with the periodic-review ones flagged and a first move per row. No account for the first run.
Build my evidence sheetPM-15 Security and Privacy Groups and Associations. Establish and institutionalize contact with selected groups and associations within the security and privacy communities: To facilitate ongoing security and privacy education and training for organizational personnel; To · PM-17 Protecting Controlled Unclassified Information on External Systems. Establish policy and procedures to ensure that requirements for the protection of controlled unclassified information that is processed, stored or transmitted on external systems, are implemented in