{"id":23905,"date":"2023-01-04T22:37:22","date_gmt":"2023-01-04T22:37:22","guid":{"rendered":"https:\/\/cs-inc.us\/?p=23905"},"modified":"2023-04-03T23:23:29","modified_gmt":"2023-04-03T23:23:29","slug":"2023-security-compliance-checklist","status":"publish","type":"post","link":"https:\/\/cs-inc.us\/2023-security-compliance-checklist\/","title":{"rendered":"2023 Security &#038; Compliance Checklist"},"content":{"rendered":"<h3><strong>2023 is here! Happy New Year\u2019s All!<\/strong><\/h3>\n<p><span style=\"font-weight: 200;\">It is time to take a close look at your 2023 schedule to make sure the critical elements of your information security and compliance programs are mapped out, plus a few extra key factors we think are important to focus on.<\/span><\/p>\n<p><b>Items you may want to schedule:<\/b><\/p>\n<ul>\n<li style=\"font-weight: 200;\" aria-checked=\"false\" aria-level=\"1\"><span style=\"font-weight: 200;\">Information Security Awareness training<\/span><\/li>\n<li style=\"font-weight: 200;\" aria-checked=\"false\" aria-level=\"1\"><span style=\"font-weight: 200;\">Policy review, updates, and approval (annually)<\/span><\/li>\n<li style=\"font-weight: 200;\" aria-checked=\"false\" aria-level=\"1\"><span style=\"font-weight: 200;\">IT Risk Assessment review and updates<\/span><\/li>\n<li style=\"font-weight: 200;\" aria-checked=\"false\" aria-level=\"1\"><span style=\"font-weight: 200;\">Cybersecurity review and updates<\/span><\/li>\n<li style=\"font-weight: 200;\" aria-checked=\"false\" aria-level=\"1\"><span style=\"font-weight: 200;\">Ransomware review and update<\/span><\/li>\n<\/ul>\n<p><b>External security assessment and audits<\/b><\/p>\n<ul>\n<li style=\"font-weight: 200;\" aria-checked=\"false\" aria-level=\"2\"><span style=\"font-weight: 200;\">Vulnerability Assessment (internal and external, expected annually)<\/span><\/li>\n<\/ul>\n<p><b>Internal assessment and audits<\/b><\/p>\n<ul>\n<li style=\"font-weight: 200;\" aria-checked=\"false\" aria-level=\"2\"><span style=\"font-weight: 200;\">User account review\/audit<\/span><\/li>\n<li style=\"font-weight: 200;\" aria-checked=\"false\" aria-level=\"2\"><span style=\"font-weight: 200;\">Cloud infrastructure review<\/span><\/li>\n<li style=\"font-weight: 200;\" aria-checked=\"false\" aria-level=\"2\"><span style=\"font-weight: 200;\">User permission testing and audits (suggested quarterly)<\/span><\/li>\n<li style=\"font-weight: 200;\" aria-checked=\"false\" aria-level=\"2\"><span style=\"font-weight: 200;\">Testing backups<\/span><\/li>\n<li style=\"font-weight: 200;\" aria-checked=\"false\" aria-level=\"2\"><span style=\"font-weight: 200;\">Power generator and UPS testing<\/span><\/li>\n<li style=\"font-weight: 200;\" aria-checked=\"false\" aria-level=\"2\"><span style=\"font-weight: 200;\">Firewall configuration and rule review (expected quarterly)<\/span><\/li>\n<\/ul>\n<ul>\n<li style=\"font-weight: 200;\" aria-checked=\"false\" aria-level=\"1\"><span style=\"font-weight: 200;\">Continuing education for IT security and IT administration<\/span><\/li>\n<li style=\"font-weight: 200;\" aria-checked=\"false\" aria-level=\"1\"><span style=\"font-weight: 200;\">VACATION!<\/span><\/li>\n<\/ul>\n<h2><b>Other items that may need attention:<\/b><\/h2>\n<ul>\n<li style=\"font-weight: 200;\" aria-checked=\"false\" aria-level=\"1\"><span style=\"font-weight: 200;\">Have you remediated all findings from your past audits and examinations?<\/span><\/li>\n<\/ul>\n<p><b>Have all your employees read and sign your institution\u2019s:<\/b><\/p>\n<ul>\n<li style=\"font-weight: 200;\" aria-checked=\"false\" aria-level=\"3\"><span style=\"font-weight: 200;\">Acceptable Use Policy<\/span><\/li>\n<li style=\"font-weight: 200;\" aria-checked=\"false\" aria-level=\"3\"><span style=\"font-weight: 200;\">Employee Handbook<\/span><\/li>\n<li style=\"font-weight: 200;\" aria-checked=\"false\" aria-level=\"3\"><span style=\"font-weight: 200;\">Confidentiality Agreements<\/span><\/li>\n<\/ul>\n<p><b>Program Training &amp; Testing:<\/b><\/p>\n<ul>\n<li style=\"font-weight: 200;\" aria-checked=\"false\" aria-level=\"3\"><span style=\"font-weight: 200;\">End-user training<\/span><\/li>\n<li style=\"font-weight: 200;\" aria-checked=\"false\" aria-level=\"3\"><span style=\"font-weight: 200;\">Walk-through exercises<\/span><\/li>\n<\/ul>\n<p><b>Partial or Complete Tests of the Following:<\/b><\/p>\n<ul>\n<li style=\"font-weight: 200;\" aria-checked=\"false\" aria-level=\"4\"><span style=\"font-weight: 200;\">Business Continuity Plan<\/span><\/li>\n<li style=\"font-weight: 200;\" aria-checked=\"false\" aria-level=\"4\"><span style=\"font-weight: 200;\">Disaster Recovery Plan<\/span><\/li>\n<li style=\"font-weight: 200;\" aria-checked=\"false\" aria-level=\"4\"><span style=\"font-weight: 200;\">Business Impact Analysis<\/span><\/li>\n<li style=\"font-weight: 200;\" aria-checked=\"false\" aria-level=\"4\"><span style=\"font-weight: 200;\">Pandemic Continuity Plan<\/span><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>2023 is here! Happy New Year\u2019s All! It is time to take a close look at your 2023 schedule to make sure the critical elements of your information security and compliance programs are mapped out, plus a few extra key factors we think are important to focus on. Items you may want to schedule: Information [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":23909,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[1],"tags":[],"class_list":["post-23905","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blogs"],"_links":{"self":[{"href":"https:\/\/cs-inc.us\/wp-json\/wp\/v2\/posts\/23905","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cs-inc.us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cs-inc.us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cs-inc.us\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cs-inc.us\/wp-json\/wp\/v2\/comments?post=23905"}],"version-history":[{"count":6,"href":"https:\/\/cs-inc.us\/wp-json\/wp\/v2\/posts\/23905\/revisions"}],"predecessor-version":[{"id":23918,"href":"https:\/\/cs-inc.us\/wp-json\/wp\/v2\/posts\/23905\/revisions\/23918"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cs-inc.us\/wp-json\/wp\/v2\/media\/23909"}],"wp:attachment":[{"href":"https:\/\/cs-inc.us\/wp-json\/wp\/v2\/media?parent=23905"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cs-inc.us\/wp-json\/wp\/v2\/categories?post=23905"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cs-inc.us\/wp-json\/wp\/v2\/tags?post=23905"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}