Information Gathering -> Monitoring: Simple budget metrics
Risk and Opportunity
Risk: Not getting notified about reaching the end of the budget (e.g. due to a denial of service) creates unexpected costs.
Opportunity: Cloud providers often provide insight into budgets. A threshold and alarming for the budget is set.
Additional Information
Usefulness and Requirements of this Activity
Usefullness: Very High
Required knowledge: Very Low (one discipline)
Required time: Very Low
Required resources (systems): Very Low
OWASP SAMM VERSION 2
ISO27001 2017