2023-05 – Security vulnerability in underlying technology is exploited
| Veld | Waarde |
|---|---|
| Status | Actief |
| Behandeling | Accepteren |
| Kans | Laag |
| Impact | Hoog |
| Blootstelling | Midden |
| Restblootstelling | Laag |
| Eigenaar | Management |
| Verantwoordelijke | Security Officer |
Asset
Confidential information stored in application
Dreiging
A security vulnerability in underlying technology, such as web/database server or used frameworks/libraries, is exploited.
Risicocategorie
Vertrouwelijkheid, Integriteit, Beschikbaarheid
Risicoscore
| Kans | Impact | Blootstelling | Restblootstelling |
|---|---|---|---|
| Laag | Hoog | Midden | Laag |
Behandelingsmaatregelen
- Maintain a list of relevant sources of information (A.5.6 Contact with special interest groups)
- Implement A.5.7 Threat intelligence
- Implement A.8.8 Management of technical vulnerabilities
- Execute frequent vulnerability scans and penetration tests (A.5.36 Compliance with policies and standards for information security)