Protect 2.3.6 Protective technology Install technical security solutions in accordance with requirements and procedures to ensure the security and resilience of your ICT systems and their data. Description Task PR.PT-1 Define requirements for audits and log records. Produce and check the regular logs in accordance with those requirements and policies. PR.PT-2 Ensure that removable media are protected, and that they are used only in accordance with policy. PR.PT-3 Ensure that your system is configured so that a minimum level of functionality is guaranteed at all times. PR.PT-4 Ensure that your communications and control networks are protected. PR.PT-5 Ensure that your systems function in accordance with pre-defined scenarios. Examples include functionality during an attack, functionality during the recovery phase, and functionality during normal operation. Table 25: PR.PT tasks Standard Reference COBIT 5 APO11.04, DSS05.02, APO13.01, BAI04.01, BAI04.02, BAI04.03, BAI04.04, BAI04.05, DSS01.05 ISA 62443-3:2013 SR 2.3, SR 2.8, SR 2.9, SR 2.10, SR 2.11, SR 2.12, SR 1.1, SR 1.2, SR 1.3, SR 1.4, SR 1.5, SR 1.6, SR 1.7, SR 1.8, SR 1.9, SR 1.10, SR 1.11, SR 1.12, SR 1.13, SR 2.1, SR 2.2, SR 2.4, SR 2.5, SR 2.6, SR 2.7, SR 3.1, SR 3.5, SR 3.8, SR 4.1, SR 4.3, SR 5.1, SR 5.2, SR 5.3, SR 7.1, SR 7.2, SR 7.6 ISO 27001:2013 A.12.4.1, A.12.4.2, A.12.4.3, A.12.4.4, A.12.7.1, A.8.2.2, A.8.2.3, A.8.3.1, A.8.3.3, A.11.2.9, A.9.1.2, A.13.1.1, A.13.2.1, A.17.1.2, A.17.2.1 NIST-SP-800-53 Rev. 4 AU Family, MP-2, MP-4, MP-5, MP-7, AC-3, CM-7, AC-4, AC-17, AC-18, CP-8, SC-7, CP-7, CP-8, CP-11, CP-13, PL-8, SA-14, SC-6 BSI B 5.22, M 2.500, M 2.220, M 2.64, M 4.227, M 2.64, B 1.18, B 4.1, M 2.393, B 1.3, B 2.4, B 2.9 Table 26: PR.PT references Minimum ICT standard 2018 26