Property:Modification date

From GCA ACT
Jump to navigationJump to search
previous 202050100250500next 20
Showing 20 pages using this property.
I
ID.BE-3: Priorities for organizational mission, objectives, and activities are established and communicated +
03:24:42, 23 October 2023  +
ID.BE-4: Dependencies and critical functions for delivery of critical services are established +
03:25:10, 23 October 2023  +
ID.BE-5: Resilience requirements to support delivery of critical services are established for all operating states (e.g. under duress or attack, during recovery, normal operations) +
03:24:48, 23 October 2023  +
ID.GV-1: Organizational cybersecurity policy is established and communicated +
03:24:58, 23 October 2023  +
ID.GV-2: Cybersecurity roles and responsibilities are coordinated and aligned with internal roles and external partners +
03:24:45, 23 October 2023  +
ID.GV-3: Legal and regulatory requirements regarding cybersecurity, including privacy and civil liberties obligations, are understood and managed +
03:25:08, 23 October 2023  +
ID.GV-4: Governance and risk management processes address cybersecurity risks +
03:24:58, 23 October 2023  +
ID.RA-1: Asset vulnerabilities are identified and documented +
03:24:56, 23 October 2023  +
ID.RA-2: Cyber threat intelligence is received from information sharing forums and sources +
03:24:44, 23 October 2023  +
ID.RA-3: Threats, both internal and external, are identified and documented +
03:25:00, 23 October 2023  +
ID.RA-4: Potential business impacts and likelihoods are identified +
03:24:53, 23 October 2023  +
ID.RA-5: Threats, vulnerabilities, likelihoods, and impacts are used to determine risk +
03:24:56, 23 October 2023  +
ID.RA-6: Risk responses are identified and prioritized +
03:24:59, 23 October 2023  +
ID.RM-1: Risk management processes are established, managed, and agreed to by organizational stakeholders +
03:24:50, 23 October 2023  +
ID.RM-2: Organizational risk tolerance is determined and clearly expressed +
03:24:49, 23 October 2023  +
ID.RM-3: The organization’s determination of risk tolerance is informed by its role in critical infrastructure and sector specific risk analysis +
03:24:42, 23 October 2023  +
ID.SC-1: Cyber supply chain risk management processes are identified, established, assessed, managed, and agreed to by organizational stakeholders +
03:24:52, 23 October 2023  +
ID.SC-2: Suppliers and third party partners of information systems, components, and services are identified, prioritized, and assessed using a cyber supply chain risk assessment process +
03:24:50, 23 October 2023  +
ID.SC-3: Contracts with suppliers and third-party partners are used to implement appropriate measures designed to meet the objectives of an organization’s cybersecurity program and Cyber Supply Chain Risk Management Plan. +
03:24:55, 23 October 2023  +
ID.SC-4: Suppliers and third-party partners are routinely assessed using audits, test results, or other forms of evaluations to confirm they are meeting their contractual obligations. +
03:24:46, 23 October 2023  +
Retrieved from ‘https://act.gcai.dev/index.php/Property:Modification_date’