Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Microsoft Azure

Amazon Web Services

Security patches

  • Software updates to resolve security vulnerabilities (“security patches”) will be made available according the following timelines:

  • CVSS scores of 9 and above (Critical): immediately

  • CVSS scores of 7 and above : 14 days. (High): next release (3 weeks)

  • CVSS scores between 4 and 7: next sprintwithin 3 releases (nine weeks)

  • CVSS scores below 4: best effort.

Idem.

Vulnerability scanning - methods in use

...

  • Monthly XX

  • CIS benchmark scanning

(Host) Intrusion detection monitoring (e.g. malware protection)

  • Office equipment (e.g. laptops, workstations)

    • XXX

  • MSTC

    • Microsoft Azure

      • We are using Supported:

        • Virus & threat protection in Windows Security. It runs different types of scans and gets the latest protection offered by Microsoft Defender Antivirus.

      • Not supported

        • Intrusion detection system (IDS)

        • Anti-malware

        • Anti-virus

        • Anti-ransomware

    • Amazon web services

      • XXX

Network traffic/nodes

...