You are a recently hired consultant at an accounting and inf…
You are a recently hired consultant at an accounting and information systems consulting firm. Your firm has been engaged by a cloud service provider (CSP) to evaluate its controls and to provide recommendations as to how the CSP can enhance its cybersecurity while also demonstrating its compliance with various security frameworks. Specifically, the CSP has processes/controls that enable it to identify malicious activity in its network quickly and has the ability to retain evidence of whether attacks against its network have been successful or not. Furthermore, the CSP has controls to help determine the extent of the attack and can use its collected evidence as part of follow-up investigations and incident response. The Center for Internet Security (CIS) v8 control that the CSP is describing is [CISControls].
Read Details