Canada ITSG-33 - IT Security Risk Management
Annex 2: Operations, maintenance, disposal and external capabilities – Canada ITSG-33 - IT Security Risk Management

Canada ITSG-33 - IT Security Risk Management A2-4.2: 4.2 Monitor and assess security

What does A2-4.2 require?

Operations groups, with the IT security function or an internal protection centre, continuously monitor and analyse changes in threats, vulnerabilities, impacts and risks; monitor the performance of security mechanisms; analyse event records; identify, report and respond to incidents with recovery and reporting; protect logs and monitoring artefacts; and report the overall posture to senior officials.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Annex 2: Operations, maintenance, disposal and external capabilities – Canada ITSG-33 - IT Security Risk Management

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Canada ITSG-33 - IT Security Risk Management controls