IRO-03
Indicators of Compromise (IOC)
Description
Mechanisms exist to define specific Indicators of Compromise (IOC) to identify the signs of potential cybersecurity events.
Control Question
Does the organization define specific Indicators of Compromise (IOC) to identify the signs of potential cybersecurity events?
Control Metadata
Domain:
Incident Response
Validation Cadence:
Semi-Annual
Evidence Request List:
E-IRO-02