Authentication
What is authentication?
What is this process that verifies that a user is who they claim to be?
An auditor asks for evidence that a production change followed the proper process. The strongest evidence comes from records stored in this tool.
What is the IT Service Management (ITSM)/ServiceNOW tool?
An application remains open indefinitely after a user walks away from their workstation. Which control is not being met?
What is Configure automatic logoff based on inactivity?
What question should a disaster recovery plan answer?
What is so we can recover the application when a disruption occurs?"
How long do non-PHI related system have to retain their logs for?
What is 1 year?
A system update is implemented directly in production without testing or approval. Which control is not being followed?
What is Change Management?
These five required audit log elements include user identifier, date and time, event type, action performed, and this technical detail about the originating device.
What is the device information (such as IP address or device name)?
A vendor has unrestricted remote administrator access that is not monitored or approved. Is this compliant?
What tool does Geisinger use for Authentication for accounts with administrative privilege?
Privileged Identity Management (PIM)
Why is maintaining an accurate asset inventory important?
What is to know what assets exist and ensure they are managed and secured?
What control has the worst Compliance score?
What is Configure the detailed data elements to be captured for all logs so that events are identified by type, location, subject, user, what data was accessed, etc.
Why is keeping systems on the latest approved version important?
What is it reduces known vulnerabilities and security risks?