Compliances
- Compliant
GDPR - Compliant
SOC 2
Controls
DetailsControl Environment
- Compliance with policies, rules and standards for information security
- Code of Conduct acknowledged by contractors
- Board meetings conducted
- Audit controls implemented
- Board charter documented
- Employee background checks performed
- +4 more
Communication and Information
- System changes communicated
- SOC 2 - System Description
- Data integrity maintained
- System changes externally communicated
- Code of Conduct acknowledged by employees and enforced
Risk Assessment
- Infrastructure performance monitored
- Compliance with policies, rules and standards for information security
- Risk assessment objectives specified
- Annual risk assessment performed annually
- Audit controls implemented
- Risk management program established
- +2 more
Monitoring Activities
- Security controls evaluated
- Critical system review performed quarterly
- Nonconformity and corrective action
- Audit controls implemented
- Board oversight briefings conducted
Control Activities
- Security controls evaluated
- Documentation change control
- Operational system checks
- Compliance with policies, rules and standards for information security
- Audit controls implemented
- Risk management program established
- Development lifecycle established