Controls
DetailsControl Environment
- Security awareness training implemented
- Security policies established and reviewed
Communication and Information
- Data integrity maintained
- Third-party agreements established
- Security policies established and reviewed
Monitoring Activities
- Critical system review performed quarterly (SOC 2)
Control Activities
- Development lifecycle established
- Documentation change control
- Security policies established and reviewed
- Operational system checks
Logical and Physical Access Controls
- Securely dispose of data (SOC 2)
- Data center access reviewed
- Malicious software protection implemented
- Password policy enforced
- Remote access encrypted enforced
- System access limitation
- +2 more