In this article I will present to you a way that ISO 27001 can help organizations deal with this kind of situation, through control A.12.6.1 – Technical vulnerability management. This scenario is more common than you can imagine, and sometimes darker: data lost or stolen, and operational losses that make business continuity impossible.
To make things worse, they discover that the root cause had already been identified and corrected by the manufacturer, through a procedure that takes no longer than five minutes.
While treating the event, the IT staff discovers that the root cause was a weakness in one of the information systems that, by either a provoked or unintentional action, led to the systems malfunction. Fortunately, no data was lost, only work hours. User support starts to receive dozens of calls, and the IT staff works hard for hours to put all systems back online again. You have certainly already heard, or lived, this scenario: it is a normal day and the systems are working fine, when suddenly they slow down for no apparent reason or simply stop.
0 kommentar(er)
