Monitoring, incident response and governance.

Technologies

• Incident response Preparing, detecting, containing, recovering and learning, tied to risk management.
• Security monitoring and logging Central collection and correlation of device, network and application events.
• Coordinated vulnerability disclosure Receiving, triaging and fixing reported vulnerabilities, with a published contact.
• CSIRT services The services a security response team provides to its constituency.
• Digital evidence handling Identification, collection and preservation of evidence after an incident.
• Information security management The management system that sets policy, risk treatment and audit.
• Government security control profiles Control catalogues used for Canadian public sector systems.
• Product security evaluation Independent evaluation of security functions against protection profiles.