7.4. IT Compliance Controls
An IT compliance control is a procedure, a technology, or both, that is intended to help ensure the correct operation of a set of IT processes related to compliance. Although this chapter doesn't provide details about specific controls you should use to achieve successful IT compliance, you may want to consider some of the areas set forth below:
Identity and access management: Management of all user identities and accounts, and control of their access to critical IT resources.
Vulnerability management: Controls to ensure that the current versions of software packages are being used on relevant systems, so that system and network vulnerabilities are both known and minimized.
Threat management: Controls used to detect, ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access