Action Plan:
- About 2 stages monitoring.
We disagree.
Since 09/2014 the 2 stages process is in place and controlled.
Stage 1: ISO proposes the generic list of I/O communications list to management.
Stage 2: By request, management is provided with details in case of doubt (or official forensic in case of legal actions).

- About Varonis (which is not a "detective process" but an audit tool that logs each and every action on systems)
We agree.
Document Classification exists in the software (Ewub has acquired the option) but is not exploited yet.
An attempt of classification at three levels (public - internal - confidential) will be tested this year.

Очень-очень начерно. Грубо говоря, обсуждение того, какое структурное подразделение что вводит в процесс и что получает на выходе.

... список (перечень процессов взаимодействия типа "Ввод/Вывод")