Canada ITSG-33 - IT Security Risk Management
Annex 1: Departmental IT security risk management activities – Canada ITSG-33 - IT Security Risk Management

Canada ITSG-33 - IT Security Risk Management A1-4.3.1: 4.3.1 Deploy and operate common security controls

What does A1-4.3.1 require?

Once profiles are approved the IT security coordinator coordinates the deployment of common security controls, choosing for each whether it is run by the IT security function, an IT operations group, another internal group or an outsourced provider, or taken from an existing GC shared service (for example continuous monitoring by the IT security function, boundary protection by network operations, an alternate processing site under contract, end-user authentication from Shared Services Canada). Where a supporting system is needed it is implemented as an IT project following Annex 2.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Annex 1: Departmental IT security risk management activities – Canada ITSG-33 - IT Security Risk Management

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Canada ITSG-33 - IT Security Risk Management controls