Orange County NC Website
CrowdStrike Form May 27 2019 17 of 17 <br />10. Communications <br />Security <br /> <br />a. Maintain a secure boundary using firewalls and network traffic filtering <br />b. Require internal segmentation to isolate critical systems from general purpose networks <br />c. Require periodic reviews and testing of network controls <br />11. System <br />Acquisition, <br />Development and <br />Maintenance <br /> <br /> <br />a. Assign responsibility for system security, system changes and maintenance <br />b. Test, evaluate and authorize major system components prior to implementation <br />12. Supplier <br />Relationships <br />Periodically review available security assessment reports of vendors hosting the <br />CrowdStrike Systems to assess their security controls and analyze any exceptions set forth <br />in such reports <br />13. Information <br />Security Breach <br />Management <br />a. Monitor the access, availability, capacity and performance of the CrowdStrike Systems, <br />and related system logs and network traffic using various m onitoring software and <br />services <br />b. Maintain incident response procedures for identifying, reporting, and acting on Security <br />Breaches <br />c. Perform incident response table-top exercises with executives and representatives from <br />across various business units <br />d. Implement plan to address gaps discovered during exercises <br />e. Establish a cross-disciplinary Security Breach response team <br />14. Business <br />Continuity <br />Management <br />a. Design business continuit y with goal of 99.9% uptime SLA <br />b. Conduct scenario based testing annually <br />15. Compliance <br /> <br />a. Establish procedures designed to ensure all applicable statutory, regulatory and <br />contractual requirements are adhered to <br /> <br /> <br /> <br />DocuSign Envelope ID: 15D73919-3C2B-4FD5-B1D4-12D3A740401FDocuSign Envelope ID: 8CCC378C-D84F-4D9F-BAF3-FB77653C088ADocuSign Envelope ID: BA2C0343-56AA-4434-92F9-D28AEB96D976