ITP.1.3.060 Monitoring and updating

(a) The Tribe shall continuously gather and analyze information regarding new threats and vulnerabilities, actual and potential attacks on the Tribe or others, and the effectiveness of the existing security controls.

(b) The information in par. (a) shall be used to update the risk assessment, strategy, and implemented controls.

(c) To complete the goals of (a) and (b) the Tribe shall utilize malware, antivirus, and other security programs.