💼 5.25 Assessment and decision on information security events

• Contextual name: 💼 5.25 Assessment and decision on information security events
• ID: /frameworks/iso-iec-27001-2022/05/25
• Located in: 💼 5 Organizational controls

Description

The organization shall assess information security events and decide if they are to be categorized as information security incidents.

Similar

• Internal
  • ID: dec-c-743d343c

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags

Policies (3)

Policy	Logic Count	Flags
📝 AWS CloudTrail Log File Validation is not enabled 🟢	1	🟢 x6
📝 Google Cloud Audit Logging is not configured properly 🟢	1	🟢 x6
📝 Google GCE Network DNS Policy Logging is not enabled 🟢	1	🟢 x6

Internal Rules

Rule	Policies	Flags
✉️ dec-x-b1e1a494	1