Does your organization document and maintain baselines of expected communication patterns and data flows with third parties?

Establishing and maintaining baselines of communication and data flows with third parties helps detect anomalous activities that could indicate security incidents. These baselines should document expected network traffic patterns, data exchange volumes, access requirements, and communication protocols between your organization and each third party. Regular reviews of these baselines against actual traffic can reveal unauthorized changes or potential security breaches. Evidence could include documented communication and data flow diagrams, network traffic baseline reports, third-party connection inventories, or data exchange specifications that clearly outline expected patterns and thresholds for each third-party relationship.