Requirement
In addition to the subcontrols in ECC control 2-12-3, cybersecurity requirements for event logs and monitoring management for organization's social media accounts and technology assets related to them must include at least the following:
Sub-Controls
2-6-1-1
Requirement: Activating all notifications and cybersecurity alerts for organization's social media accounts and cybersecurity events logs on related technology assets.
2-6-1-2
Requirement: Following organization's social media accounts and monitoring them to ensure that they do not post any unauthorized content, or login any unauthorized access.
2-6-1-3
Requirement: Monitoring social media networks to ensure the organization is not being impersonated.
2-6-1-4
Requirement: Automated monitoring for any change in the accounts pattern, indicators of compromise, or the publication of any unauthorized content or impersonation of the organization.
References
- ECC – 2:2024 equivalent: 2-12-3
