https://padlet.com/francesco_dilillo/Bookmarks Work in 4 groups and propose Questions about proposed controls en-us 2017-06-05 18:51:56 UTC 2025-12-12 13:35:12 UTC hello@padlet.com francesco_dilillo https://padlet.com/francesco_dilillo/Bookmarks/wish/175284142 2017-06-05 21:25:57 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175284142 francesco_dilillo1 https://padlet.com/francesco_dilillo/Bookmarks/wish/175285744 Mobile device policy
A policy and supporting security measures shall be adopted to 
manage the risks introduced by using mobile devices.]]> 2017-06-05 21:39:45 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175285744 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175483161 Teleworking
A policy and supporting security measures shall be implemented to 
protect information accessed, processed or stored at teleworking 
sites.]]> 2017-06-07 01:24:47 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175483161 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175483255 Termination or change 
of employment responsibilities
Information security responsibilities and duties that remain valid 
after termination or change of employment shall be defined, communicated 
to the employee or contractor and enforced.]]> 2017-06-07 01:25:59 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175483255 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175483305 Responsibility for assets
To identify organizational assets and define appropriate protection responsibilities.]]> 2017-06-07 01:26:36 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175483305 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175483351 Classification of information
Information should be classified in terms of legal requirements, value, criticality and sensitivity to unauthorised disclosure or modification.]]> 2017-06-07 01:27:13 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175483351 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175483396 User access management
To ensure authorized user access and to prevent unauthorized access to systems and services.]]> 2017-06-07 01:28:09 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175483396 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175483424 Management of privileged access rights
The allocation and use of privileged access rights should be restricted and controlled.]]> 2017-06-07 01:28:36 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175483424 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175483449 Review of user access rights
Asset owners should review users’ access rights at regular intervals.]]> 2017-06-07 01:29:03 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175483449 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175483484 Cryptographic controls
To ensure proper and effective use of cryptography to protect the confidentiality, authenticity 
and/or integrity of information.]]> 2017-06-07 01:29:46 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175483484 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175483538 Secure Areas
To prevent unauthorized physical access, damage and interference to the organization’s information and information processing facilities.]]> 2017-06-07 01:30:43 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175483538 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175483693 Information security in supplier relationships - Supplier service delivery management
To ensure protection of the organization’s assets that is accessible by suppliers. - To maintain an agreed level of information security and service delivery in line with supplier agreements.]]> 2017-06-07 01:33:21 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175483693 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175483784 Management of information security incidents and improvements
To ensure a consistent and effective approach to the management of information security incidents, including communication on security events and weaknesses.]]> 2017-06-07 01:34:55 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175483784 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484269 Management of information security incidents and improvements
To ensure a consistent and effective approach to the management of information security incidents, including communication on security events and weaknesses.]]> 2017-06-07 01:43:38 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484269 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484393 Management of information security incidents and improvements
To ensure a consistent and effective approach to the management of information security incidents, including communication on security events and weaknesses.]]> 2017-06-07 01:45:49 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484393 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484420 Management of information security incidents and improvements
To ensure a consistent and effective approach to the management of information security incidents, including communication on security events and weaknesses.]]> 2017-06-07 01:46:05 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484420 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484436 Information security in supplier relationships - Supplier service delivery management
To ensure protection of the organization’s assets that is accessible by suppliers. - To maintain an agreed level of information security and service delivery in line with supplier agreements.]]> 2017-06-07 01:46:23 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484436 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484445 Information security in supplier relationships - Supplier service delivery management
To ensure protection of the organization’s assets that is accessible by suppliers. - To maintain an agreed level of information security and service delivery in line with supplier agreements.]]> 2017-06-07 01:46:32 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484445 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484453 Information security in supplier relationships - Supplier service delivery management
To ensure protection of the organization’s assets that is accessible by suppliers. - To maintain an agreed level of information security and service delivery in line with supplier agreements.]]> 2017-06-07 01:46:41 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484453 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484467 Secure Areas
To prevent unauthorized physical access, damage and interference to the organization’s information and information processing facilities.]]> 2017-06-07 01:46:54 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484467 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484479 Secure Areas
To prevent unauthorized physical access, damage and interference to the organization’s information and information processing facilities.]]> 2017-06-07 01:47:11 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484479 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484496 Secure Areas
To prevent unauthorized physical access, damage and interference to the organization’s information and information processing facilities.]]> 2017-06-07 01:47:19 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484496 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484512 Cryptographic controls
To ensure proper and effective use of cryptography to protect the confidentiality, authenticity 
and/or integrity of information.]]> 2017-06-07 01:47:30 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484512 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484520 Cryptographic controls
To ensure proper and effective use of cryptography to protect the confidentiality, authenticity 
and/or integrity of information.]]> 2017-06-07 01:47:40 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484520 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484526 Cryptographic controls
To ensure proper and effective use of cryptography to protect the confidentiality, authenticity 
and/or integrity of information.]]> 2017-06-07 01:47:48 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484526 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484542 Review of user access rights
Asset owners should review users’ access rights at regular intervals.]]> 2017-06-07 01:48:02 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484542 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484551 Review of user access rights
Asset owners should review users’ access rights at regular intervals.]]> 2017-06-07 01:48:13 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484551 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484554 Review of user access rights
Asset owners should review users’ access rights at regular intervals.]]> 2017-06-07 01:48:19 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484554 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484569 User access management
To ensure authorized user access and to prevent unauthorized access to systems and services.]]> 2017-06-07 01:48:32 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484569 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484574 User access management
To ensure authorized user access and to prevent unauthorized access to systems and services.]]> 2017-06-07 01:48:40 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484574 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484578 User access management
To ensure authorized user access and to prevent unauthorized access to systems and services.]]> 2017-06-07 01:48:47 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484578 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484600 Classification of information
Information should be classified in terms of legal requirements, value, criticality and sensitivity to unauthorised disclosure or modification.]]> 2017-06-07 01:49:01 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484600 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484612 Classification of information
Information should be classified in terms of legal requirements, value, criticality and sensitivity to unauthorised disclosure or modification.]]> 2017-06-07 01:49:18 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484612 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484618 Classification of information
Information should be classified in terms of legal requirements, value, criticality and sensitivity to unauthorised disclosure or modification.]]> 2017-06-07 01:49:25 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484618 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484629 Responsibility for assets
To identify organizational assets and define appropriate protection responsibilities.]]> 2017-06-07 01:49:35 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484629 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484640 Responsibility for assets
To identify organizational assets and define appropriate protection responsibilities.]]> 2017-06-07 01:49:43 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484640 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484647 Responsibility for assets
To identify organizational assets and define appropriate protection responsibilities.]]> 2017-06-07 01:49:49 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484647 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484656 Termination or change 
of employment responsibilities
Information security responsibilities and duties that remain valid 
after termination or change of employment shall be defined, communicated 
to the employee or contractor and enforced.]]> 2017-06-07 01:50:00 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484656 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484671 Termination or change 
of employment responsibilities
Information security responsibilities and duties that remain valid 
after termination or change of employment shall be defined, communicated 
to the employee or contractor and enforced.]]> 2017-06-07 01:50:13 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484671 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484690 Termination or change 
of employment responsibilities
Information security responsibilities and duties that remain valid 
after termination or change of employment shall be defined, communicated 
to the employee or contractor and enforced.]]> 2017-06-07 01:50:22 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484690 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484697 Teleworking
A policy and supporting security measures shall be implemented to 
protect information accessed, processed or stored at teleworking 
sites.]]> 2017-06-07 01:50:36 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484697 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484706 Teleworking
A policy and supporting security measures shall be implemented to 
protect information accessed, processed or stored at teleworking 
sites.]]> 2017-06-07 01:50:46 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484706 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484712 Teleworking
A policy and supporting security measures shall be implemented to 
protect information accessed, processed or stored at teleworking 
sites.]]> 2017-06-07 01:50:54 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484712 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484752 Mobile device policy
A policy and supporting security measures shall be adopted to 
manage the risks introduced by using mobile devices.]]> 2017-06-07 01:51:33 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484752 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484778 Mobile device policy
A policy and supporting security measures shall be adopted to 
manage the risks introduced by using mobile devices.]]> 2017-06-07 01:52:10 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484778 federico_nunez https://padlet.com/francesco_dilillo/Bookmarks/wish/175484784 Mobile device policy
A policy and supporting security measures shall be adopted to 
manage the risks introduced by using mobile devices.]]> 2017-06-07 01:52:16 UTC https://padlet.com/francesco_dilillo/Bookmarks/wish/175484784