Files
probo/controls/core/infra/COR.INF.007_asset_decommissioning.md
gearnode b67e15c631 Add keep and transparency
Signed-off-by: gearnode <bryan@frimin.fr>
2025-01-15 15:50:00 +01:00

757 B
Raw Blame History

id, category, revision-version, revision-date, estimate-time, necessity, frameworks
id category revision-version revision-date estimate-time necessity frameworks
COR.INF.007 core/infra 1 2024-01-14 1h mandatory
name sections
soc2
CC2.1
CC6.8

Remove unauthorized assets

Purpose

Outdated/unmonitored/etc.. assets (VMs, Buckets, etc..) pose a significant risk:

  • They can be used for malicious activities
  • You don’t manage them, they could lack proper security measures.

Implementation

Review the list of authorized asset you created List of your assets , identify the ones that should not be there, and select the proper action:

  • Disconnect the asset from your network
  • Scan for security updates on the asset and ensure proper access control