Security Controls – Discord Users Affected by Data Breach via Third-Party Provider

🛡️ Security Controls

Relevant security controls from major frameworks:

CIS Critical Security Controls® v8.0

15.115.215.414.6

Hide Control Details (4 controls)▲

15.1Establish and Maintain an Inventory of Service Providers

N/AIdentify

Establish and manage an updated inventory of third-party components used in development, often referred to as a “bill of materials,” as well as components slated for future use. This inventory is to include any risks that each third-party component could pose. Evaluate the list at least monthly to identify any changes or updates to these components, and validate that the component is still supported.

15.2Establish and Maintain a Service Provider Management Policy

N/AIdentify

Establish and maintain a service provider management policy. Ensure the policy addresses the classification, inventory, assessment, monitoring, and decommissioning of service providers. Review and update the policy annually, or when significant enterprise changes occur that could impact this Safeguard.

15.4Ensure Service Provider Contracts Include Security Requirements

N/AProtect

Apply static and dynamic analysis tools within the application life cycle to verify that secure coding practices are being followed.

14.6Train Workforce Members on Recognizing and Reporting Security Incidents

N/AProtect

Train workforce members to be able to recognize a potential incident and be able to report such an incident.

Attribution

License
This product/service incorporates the CIS Critical Security Controls® with the express permission of the Center for Internet Security, Inc. Use of the CIS Controls in this commercial offering is authorized under a commercial license granted by CIS.

Trademark Notice
"CIS®" and "CIS Critical Security Controls®" are registered trademarks of the Center for Internet Security, Inc. and are used under license.

Source Reference
The original CIS Critical Security Controls are available, free of charge for non-commercial use, at: https://www.cisecurity.org/controls.

Disclaimer
CIS does not endorse, certify, or warrant this product/service. Any views or interpretations are those of Paranoid Cybersecurity, not CIS.