Security Incident Management and E-Discovery and Cloud Forensics (SEF)
Establish, document, approve, communicate, apply, evaluate and maintain policies and procedures for Security Incident Management, E-Discovery, and Cloud Forensics. Review and update the policies and procedures at least annually.
Parent
Compliance Framework
CCM v4.0.10
Control Number
SEF-01
Related
Compliance Framework
CIS v8.0
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Security Incident Management and E-Discovery and Cloud Forensics (SEF)
Level N/A
Establish, document, approve, communicate, apply, evaluate and maintain policies and procedures for the timely management of security incidents. Review and update the policies and procedures at least annually.
Parent
Compliance Framework
CCM v4.0.10
Control Number
SEF-02
Related
Compliance Framework
CIS v8.0
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Security Incident Management and E-Discovery and Cloud Forensics (SEF)
Level N/A
'Establish, document, approve, communicate, apply, evaluate and maintain a security incident response plan, which includes but is not limited to: relevant internal departments, impacted CSCs, and other business critical relationships (such as supply-chain) that may be impacted.'
Parent
Compliance Framework
CCM v4.0.10
Control Number
SEF-03
Related
Compliance Framework
CIS v8.0
CIS v8.0
ISO 27002:2022
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Control Number
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Security Incident Management and E-Discovery and Cloud Forensics (SEF)
Level N/A
Test and update as necessary incident response plans at planned intervals or upon significant organizational or environmental changes for effectiveness.
Parent
Compliance Framework
CCM v4.0.10
Control Number
SEF-04
Related
Compliance Framework
CIS v8.0
ISO 27002:2022
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Security Incident Management and E-Discovery and Cloud Forensics (SEF)
Level N/A
Establish and monitor information security incident metrics.
Parent
Compliance Framework
CCM v4.0.10
Control Number
SEF-05
Related
Compliance Framework
CIS v8.0
ISO 27002:2022
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
NIST CSF v1.1
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Security Incident Management and E-Discovery and Cloud Forensics (SEF)
Level N/A
Define, implement and evaluate processes, procedures and technical measures supporting business processes to triage security-related events.
Parent
Compliance Framework
CCM v4.0.10
Control Number
SEF-06
Related
Compliance Framework
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
CIS v8.0
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Security Incident Management and E-Discovery and Cloud Forensics (SEF)
Level N/A
Define and implement, processes, procedures and technical measures for security breach notifications. Report security breaches and assumed security breaches including any relevant supply chain breaches, as per applicable SLAs, laws and regulations.
Parent
Compliance Framework
CCM v4.0.10
Control Number
SEF-07
Related
Compliance Framework
CIS v8.0
CIS v8.0
CIS v8.0
ISO 27002:2022
ISO 27002:2022
ISO 27002:2022
ISO 27002:2022
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Security Incident Management and E-Discovery and Cloud Forensics (SEF)
Level N/A
Maintain points of contact for applicable regulation authorities, national and local law enforcement, and other legal jurisdictional authorities.
Parent
Compliance Framework
CCM v4.0.10
Control Number
SEF-08
Related
Compliance Framework
CIS v8.0
ISO 27002:2022
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Supply Chain Management and Transparency and Accountability (STA)
Level N/A
Establish, document, approve, communicate, apply, evaluate and maintain policies and procedures for the application of the Shared Security Responsibility Model (SSRM) within the organization. Review and update the policies and procedures at least annually.
Parent
Compliance Framework
CCM v4.0.10
Control Number
STA-01
Related
Compliance Framework
ISO 27002:2022
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Supply Chain Management and Transparency and Accountability (STA)
Level N/A
Apply, document, implement and manage the SSRM throughout the supply chain for the cloud service offering.
Parent
Compliance Framework
CCM v4.0.10
Control Number
STA-02
Related
Compliance Framework
ISO 27002:2022
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
