Hmm, I'm not so sure. Wouldn't this be considered a technical control? The firewall itself is a technical implementation, so the review must be a technical process too.
I disagree, this is definitely a management control. The IT team can't just set and forget the firewall, the managers need to review and approve any changes.
The regular review of a firewall ruleset seems like a procedural control to me. We need to ensure the firewall is configured properly and rules are up-to-date.
Catina
28 days agoErin
29 days agoNana
3 days agoEarlean
10 days agoHyman
1 months agoGracia
19 days agoElbert
20 days agoDaron
1 months agoTawanna
20 days agoCharlette
22 days agoKerry
1 months agoGladys
2 months agoMarci
13 days agoBrock
19 days agoNorah
22 days agoAsuncion
1 months agoNada
1 months agoDianne
1 months agoOra
2 months agoDwight
2 months agoMarget
2 months ago