THR-02
Indicators of Exposure (IOE)
Description
Mechanisms exist to develop Indicators of Exposure (IOE) to understand the potential attack vectors that attackers could use to attack the organization.
Control Question
Does the organization develop Indicators of Exposure (IOE) to understand the potential attack vectors that attackers could use to attack the organization?
Control Metadata
Domain:
Threat Management
Validation Cadence:
Annual
Evidence Request List:
E-THR-01
Framework Mappings
This control maps to the following compliance frameworks
MAS TRM
14.3.114.3.214.3.3