Redmine

09/03/2026

NK 08:45 AM ISO Task Tracker #188: System Gap-23 OMS has not determined what needs to be monitored and measured (including information security processes and controls), methods for monitoring, measurement, analysis, and evaluation, when the monitoring and measuring shall be performed...

**Progress Update - 2026-09-03**
**System Gap-23: Monitoring & Measurement**
**✅ COMPLETED:**
**Monitoring Catalogue (12 Metrics):**
✅ M-001: Public service exposure - defined
✅ M-002: Rejected connections - defined
✅ M-003: ... Ntokozo Khanyile

NK 08:42 AM ISO Task Tracker #186: System Gap- 21 OMS has not yet performed information security risk assessments at planned intervals as per the requirements of the standard.

**Progress Update - 2026-09-03**
**System Gap-21: Information Security Risk Assessments**
**✅ COMPLETED:**
**Governance Framework:**
✅ Vulnerability Management Procedure created and approved
✅ Monthly Risk Review Template crea... Ntokozo Khanyile

NK 08:38 AM ISO Task Tracker #179: 31. Establish OMS IT Risk Reviews, Risk Register and Information Security Risk Treatment Process

**Progress Update - 2026-09-03**
**✅ COMPLETED:**
**Governance & Ownership:**
✅ Executive Risk Owner appointed
✅ Process Owner (Information Security Risk Coordinator) appointed
✅ Policy & Procedure document ready for MANCO appro... Ntokozo Khanyile

07/28/2026

NK 08:19 AM ISO Task Tracker #186 (In Progress): System Gap- 21 OMS has not yet performed information security risk assessments at planned intervals as per the requirements of the standard.

A monthly review schedule and template have now been drafted as part of the broader #179 risk-governance work (see attached OMS_Risk_Review_Reporting_Workflow_Templates.docx, Section 1 – Monthly Risk Review Template).
This template de... Ntokozo Khanyile

NK 08:17 AM ISO Task Tracker #188 (In Progress): System Gap-23 OMS has not determined what needs to be monitored and measured (including information security processes and controls), methods for monitoring, measurement, analysis, and evaluation, when the monitoring and measuring shall be performed...

A draft Security Monitoring & Measurement Catalogue has been produced (see attached OMS_188_Monitoring_Catalogue.xlsx), covering:
Monitoring Catalogue – 12 security events/controls in scope (exposure, rejected connections, privileged ... Ntokozo Khanyile

07/27/2026

NK 01:29 PM ISO Task Tracker #179 (In Progress): 31. Establish OMS IT Risk Reviews, Risk Register and Information Security Risk Treatment Process

Ntokozo Khanyile