Compliances
Controls
View allControl Environment
- Code of Conduct acknowledged by employees and enforced
- Board oversight briefings conducted (SOC 2)
- Audit controls implemented
- Security awareness training implemented
- Security policies established and reviewed
- Employee background checks performed
- +6 more
Communication and Information
- Code of Conduct acknowledged by employees and enforced
- Data integrity maintained
- Third-party agreements established
- System changes communicated
- Security policies established and reviewed
- System changes externally communicated
Risk Assessment
- Risk assessment objectives specified
- Risks assessments performed
- Annual risk assessment performed annually
- Infrastructure performance monitored
- Audit controls implemented
- Change management procedures enforced
- +2 more
Monitoring Activities
- Board oversight briefings conducted (SOC 2)
- Audit controls implemented
- Security controls evaluated
- Nonconformity and corrective action
- Critical system review performed quarterly (SOC 2)
Control Activities
- Audit controls implemented
- Development lifecycle established
- Security controls evaluated
- Documentation change control
- Security policies established and reviewed
- Risk management program established
- +2 more