Protect - Maintenance
System maintenance standards and procedures are critical to protecting the organization’s ongoing operations. It might not be sexy, but it’s vital for operations.
Maintenance of assets includes all types of care and not just for IT assets, including:
System software and business applications
Network devices include scanners, copiers, credit card machines, IoT devices, etc.
OT-specific software and devices
In June 2022, there was a report that Costco had discovered a credit card skimmer device installed in one of its stores; Costco removed the device, reported it to authorities, and is working with law enforcement to investigate the incident.
We can draw several lessons from this story; however, Costco discovered the skimmer device during routine inspections of its PIN pads. Once again, it highlights the importance of regular maintenance checks.
Small businesses, such as convenience stores, gas stations, and other companies, have routinely been ripped off by these devices, including banks with ATM skimmers. The FBI has a site providing tips on how to prevent these scams.
But what can your organization do about it? The NIST CSF offers one category and two subcategories covering the maintenance of such devices. This guidance can be added to your security standards, procedures, and practices to secure your small business.
FBI source: https://www.fbi.gov/scams-and-safety/...
========
** FREE GUIDE **
https://www.execcybered.com/asset-man...
Blog: https://www.execcybered.com/blog
Training: https://www.execcybered.com/iso27001f...
Linkedin: / exceccybered
Twitter: / drbillsouza
Instagram: / drbillsouza
Youtube: https://bit.ly/3BGOtPA
Thanks.
Dr. Bill Souza
CEO | Founder
www.execcybered.com