Validate Security Measures

The organization should after a penetration test:

• Review the findings from the test and understand the vulnerabilities that might have been exploited
• Asses the current security measuers and determine their effectiveness against the techniques used in the penetration test
• Modify the rulesets on firewalls, IDS/IPS and other security measuers to address possible shortcomings
• Enhance detection measures based on the findings
• Implement additional controls if needed
• Retest according to the penetration testing program

The vulnerability management process is regularly tested at intervals specified by the organization to ensure that it is up-to-date, functional, and effective.

Organization carries out threat intelligence by analyzing and utilizing collected information about relevant cyber security threats related and corresponding protections.

When analyzing and utilizing the collected threat intelligence information, the following points must be taken into account:

• analyzing how the threat intelligence information relates to to our own operations
• analyzing how relevant threat intelligence information is to our operations
• communicating and sharing information in an understandable form to relevant persons
• utilizing the findings of threat intelligence to determine the adequacy of technical protections, technologies used and information security testing methods for analysis