YALE-MSS-1.1.6: Provide appropriate level of staffing to manage your systems in accordance with their security requirements

Standard:
YALE-MSS-1.1: Classify the IT System and meet the Minimum Security Standards

YALE-MSS-1.1.6: Provide appropriate level of staffing to manage your systems in accordance with their security requirements

Low Risk Endpoint Not Required Moderate Risk Endpoint Not Required High Risk Endpoint Not Required Low Risk Server Required Moderate Risk Server Required High Risk Server Required Low Risk Mobile Device Not Required Moderate Risk Mobile Device Not Required High Risk Mobile Device Not Required Low Risk Network Printer Required Moderate Risk Network Printer Required High Risk Network Printer Required

Details

Provide appropriate level of staffing to manage your systems in accordance with their security requirements.

For endpoints, this standard is met by utilizing the Yale Managed Workstation service. For unmanaged endpoints containing Yale Data, a plan is in place designates individuals to ensure the device meets and maintains the Minimum Security Standards.

Staffing considerations:

  • Are there Yale employees designated as the System Decision Maker, Advisor, and Doer for this system?

  • If you are aware of upcoming staffing changes, have you identified new individuals that will take over the System Decision Maker, Advisor, or Doer roles for this system?