ISO 27001
ISO/IEC 27001:2022 expects an asset inventory, technical vulnerability management and monitoring. xSpctr keeps all three current and documented.
Mapping
xSpctr supports these requirements with evidence; it does not make you compliant on its own.
| Requirement | How xSpctr helps |
|---|---|
| A.5.9 Inventory of information and other associated assets | Internet-facing assets discovered and kept current daily. |
| A.5.7 Threat intelligence | Known-exploited vulnerabilities and exploit likelihood applied to your assets. |
| A.8.8 Management of technical vulnerabilities | Possible CVEs, prioritisation and a tracked remediation workflow. |
| A.8.16 Monitoring activities | Change detection with alerts and an activity record. |
| A.8.24 Use of cryptography | TLS, certificate and email security checks. |
In practice
Show which controls are supported by continuous monitoring.
Dated exports of checks and findings for any audit period.
Trends that show the surface getting smaller and safer.
Tell us about your organisation and we will set you up.