Redmine

07/28/2026

NK 08:19 AM ISO Task Tracker #186 (In Progress): System Gap- 21 OMS has not yet performed information security risk assessments at planned intervals as per the requirements of the standard.

A monthly review schedule and template have now been drafted as part of the broader #179 risk-governance work (see attached OMS_Risk_Review_Reporting_Workflow_Templates.docx, Section 1 – Monthly Risk Review Template).
This template de... Ntokozo Khanyile

NK 08:17 AM ISO Task Tracker #188 (In Progress): System Gap-23 OMS has not determined what needs to be monitored and measured (including information security processes and controls), methods for monitoring, measurement, analysis, and evaluation, when the monitoring and measuring shall be performed...

A draft Security Monitoring & Measurement Catalogue has been produced (see attached OMS_188_Monitoring_Catalogue.xlsx), covering:
Monitoring Catalogue – 12 security events/controls in scope (exposure, rejected connections, privileged ... Ntokozo Khanyile

07/27/2026

NK 01:29 PM ISO Task Tracker #179 (In Progress): 31. Establish OMS IT Risk Reviews, Risk Register and Information Security Risk Treatment Process

Ntokozo Khanyile