Methods to assess effectiveness of cybersecurity risk management measures

Glesys uses monitoring, internal and external audits to evaluate whether controls are implemented and effective.

Key elements:

• Internal audits: IMS internal audits are performed using a structured audit approach, reporting findings and tracking corrective actions.

• Control monitoring: Examples include endpoint compliance checks and log review routines, backup monitoring and restore testing, and supplier performance/security follow-ups based on supplier criticality.