Template 4: Patch Management & Vulnerability Control

A detailed checklist for deploying, configuring, and maintaining antivirus and anti-malware solutions across the organization. It ensures that preventive controls are properly applied to protect systems against both common and emerging threats.

A checklist for technical and management teams to assess the readiness, safety, and compliance of internal AI systems. It helps organizations ensure that AI serves legitimate business goals, operates transparently with proper controls, complies with regulations such as Vietnam's Decree 13, GDPR, and ISO standards, and minimizes the ethical, security, and legal risks that AI can introduce. Suitable for: - PMs: tracking progress and ensuring AI workstreams are managed methodically. - Tech Leads / AI Engineers: assessing AI systems in development or production in detail. - Compliance / DPOs: verifying legal compliance and personal-data protection for AI use. - CTOs / CISOs: performing periodic reviews of all AI systems in operation.

A checklist for assessing compliance with regulations, industry standards (ISO 27001, GDPR, etc.), and internal security policies. It includes security-testing activities such as vulnerability assessments and penetration testing to surface weaknesses in the environment.