Compliances
- Coming soon
GDPR - Coming soon
SOC 2
Controls
DetailsControl Environment
- Security awareness training implemented
- Compliance with policies, rules and standards for information security
- Code of Conduct acknowledged by contractors
- Board meetings conducted
- Audit controls implemented
- Security policies established and reviewed
- +4 more
Communication and Information
- System changes communicated
- Security policies established and reviewed
- Data integrity maintained
- System changes externally communicated
- Code of Conduct acknowledged by employees and enforced
Risk Assessment
- Infrastructure performance monitored
- Compliance with policies, rules and standards for information security
- Risk assessment objectives specified
- Annual risk assessment performed annually
- Audit controls implemented
- Risk management program established
Monitoring Activities
- Critical system review performed quarterly
- Nonconformity and corrective action
- Audit controls implemented
- Board oversight briefings conducted
Control Activities
- Documentation change control
- Operational system checks
- Compliance with policies, rules and standards for information security
- Audit controls implemented
- Risk management program established
- Security policies established and reviewed