Detective Control

Control activities are chosen and developed to bring risks to objectives down to acceptable levels. Points of focus: control activities carry out the risk responses from the risk assessment;

Implement preventive and detective controls commensurate with the potential impact of data being compromised, establishing risk tolerance and selecting controls to bring risk within the risk appetite.

A data loss prevention strategy and approach are formally established to spot and stop sensitive data leaving the organization's network and controls, whether on purpose or by mistake, using directive, preventive and detective controls over data in use, in mot...

Resource use is to be monitored and adjusted to fit present and expected capacity needs. Purpose: have enough capacity in processing facilities, staff, offices and other facilities.

Input: prioritised risks with chosen options. Action: determine every control, from control sets chosen from suitable sources, needed to treat the risks under the chosen options (modify, retain, avoid, share).

Describe how responses to assessed risks are developed: matching controls to the protection of assets and to detecting, answering, limiting and recovering from security events;