A1.2
Availability Commitments
Availability SOC 2 High Engineering Control requires remediation and/or additional evidence for audit readiness. CC1.1
Integrity and Ethical Values
Control Environment SOC 2 — GRC Control implemented and evidence collected for demo audit review. CC2.1
Board Oversight
Communication & Information SOC 2 — Security Control not applicable in this demo assessment scope. CC6.1
Logical Access Controls
Logical and Physical Access Controls SOC 2 — Compliance Control implemented and evidence collected for demo audit review. CC7.2
System Monitoring
System Operations SOC 2 Low IT Control implemented and evidence collected for demo audit review. CC8.1
Change Management
Change Management SOC 2 — Platform Control implemented and evidence collected for demo audit review. A.5.1
Policies for Information Security
Organizational Controls ISO/IEC 27001 Medium Engineering Control requires remediation and/or additional evidence for audit readiness. A.5.15
Access Control
Organizational Controls ISO/IEC 27001 — GRC Control implemented and evidence collected for demo audit review. A.5.23
Information Security for Cloud Services
Organizational Controls ISO/IEC 27001 Low Security Control not applicable in this demo assessment scope. A.8.15
Logging
Technological Controls ISO/IEC 27001 — Compliance Control implemented and evidence collected for demo audit review. A.8.16
Monitoring Activities
Technological Controls ISO/IEC 27001 — IT Control implemented and evidence collected for demo audit review. A.8.28
Secure Coding
Technological Controls ISO/IEC 27001 — Platform Control implemented and evidence collected for demo audit review.