Three alarms, two reports
The log of a small firm shows three security alarms last month. The incident reports show only two.
Where did the third go? Was it missed, or was it nothing?
A compliance and monitoring plan is how a firm finds gaps like this one before an inspector does.
By the end of this lesson
Note
I can use a compliance and monitoring plan to check policies, logs and reports.
Key words
| Word | What it means |
|---|---|
| Compliance | following the rules and standards that apply |
| Audit | a planned check of whether the rules are followed |
| Log file | a record a system keeps of what happens and when |
| Incident report | a written account of one security incident |
| Standard | an agreed set of good practice |
| ISMS | information security management system: the set of rules and checks that protects information |
The cells students fill in are left blank in this preview.
Starter
Have a go
Starter
3 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.
An audit keeps policies up to date
Rules go out of date. New devices arrive. New laws appear. An audit checks the processes and policies against what really happens.
For example, review the information security policy every year. If it is out of date, change it. Then improve and keep the process going.
Check
Have a go
Check
3 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.