Controls

Logical Access Controls

Access to systems is restricted to authorized users.

Access Provisioning & Removal

Access is removed when it is no longer required.

Control Environment & Integrity

The organization demonstrates a commitment to integrity and ethical values.

Security Monitoring

Anomalies and security events are detected and analyzed.

Change Management

Changes are authorized, tested and approved before deployment.

Vendor Risk Management

Vendors and business partners are assessed for risk.

Backup & Recovery

Backups are performed and recovery is tested.

Confidential Data Handling

Confidential information is identified and protected.

Input Validation & Completeness

Inputs are validated for completeness and accuracy.

Notice & Consent

Individuals are informed about how personal data is used.