SkillSetz Periodic Operational Security Procedures
Task |
Weekly |
Monthly |
Quarterly |
BiAnnually |
Annually |
Target Window |
|
SECURITY POLICY |
||||||
|
Policy/standards review |
X |
Q3 |
||||
|
Security awareness orientation |
X |
Q3 |
||||
|
ORGANIZATIONAL SECURITY |
||||||
|
Verify PCI DSS compliance status of third parties |
X |
Q3 |
||||
|
Test Incident Response Plan |
X |
Q3 |
||||
|
PERSONNEL SECURITY |
||||||
|
Audit terminated employee samples for system, network, application access |
X |
Week-1 |
||||
|
Incident response team meeting |
X |
Week-1 |
||||
|
SYSTEM SECURITY |
||||||
|
Review security and event logs |
X |
Day-1 |
||||
|
Authorization key check |
X |
Week-1 |
||||