Security Policies Incident Response Plans

No central updates and patches for the application and software

Risk Description

Increase the likelihood of performance and security issues, which could affect the user experience and put data at risk. 

Existing Controls

Basic controland manual update 

Risk Mitigation Policy

  1. List software inventory used in UTAS-Sur with the approved version/signature.  
  2. Regular Updates (Ensure the app is updated frequently to fix security vulnerabilities). 
  3. Automated Patch Deployment (Use systems to automatically apply patches to all devices). 
  4. Security Audits (Regularly check for security flaws and fix them). 
  5. Backup and Recovery Plans (Keep regular backups and have recovery procedures in place for any issue) 

Location/Contact Person details

The chairman of risk management sub-committee in UTAS-SUR
Dr.Sami Al-Batashi, Phone: +968 9293 9604
Email: sami.albattashi@utas.edu.om

Risk Management Authority

Risk Management Committee in UTAS-SUR

Risk Likelihood

Medium

Risk Impact

Medium

Risk Level

Medium

Risk Incident Response Procedures

  1. Monitor the application for any signs of vulnerabilities or security breaches due to outdated software 
  2. Quickly isolate affected systems or users to prevent the spread of security issues or performance problems caused by outdated patches. 
  3. Apply the necessary updates and patches to the application to fix any security vulnerabilities and performance issues. 
  4. Restore systems and services to normal operation, ensuring all updates are applied and systems are secure. 

Risk Termination

By sending the final report explaining the problem causes and how we can mitigate next time.