Snapshot 259242
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Monitored and Powered by Trust Center www.runpulse.com hello@trypulse.ai Compliance overview Current compliance status across frameworks HIPAA Compliant SOC 2 Type 2 Compliant ISO 27001 Certified GDPR Compliant Compliance Program An overview of security controls in place Access Control and Authorization Access granting process used Access management policy established Access requests to sensitive data required Access requests to sensitive infrastructure required Access revoking process enforced Account inventory maintained Automated decision-making and profiling has oversight Dedicated administrator accounts used Dormant accounts disabled Employee access regularly reviewed Key inventory maintained MFA required for administrative access MFA required for applications MFA required for infrastructure access Password management policy enforced Password management policy established Data Management and Protection Consent for collecting and managing data obtained Data deletion enforced Data encrypted at rest Data encrypted in-transit Data inventory maintained Data labeled according to classification level Data labeled by sensitivity level Data management and retention policy established Data masking procedures used Data processing integrity and output validated Data transfer mechanisms established External privacy inquiries managed Key management process implemented Privacy disclosure and notification mechanisms established Privacy policy created and maintained Disaster Recovery Automated backups enabled Business continuity and disaster recovery policy established Business continuity plans documented Data backup and recovery policy established Data recovery process established Recovery data isolated Email Security DMARC policy and verification used Email account access restricted Email settings block malicious content Endpoint Security Anti-malware deployed on end-user devices Automatic session locking enforced Data encrypted on end-user devices Firewall maintained on end-user devices Mobile device management (MDM) used Software inventory on end-user devices maintained Unauthorized software on end-user devices addressed and removed Infrastructure Security Active discovery tools used Administrator access restricted Anti-malware deployed on infrastructure Automated security scanning performed on infrastructure Buckets not exposed publicly Clock synchronization enforced Configuration management system established Firewall restricts public access to infrastructure High availability infrastructure used Infrastructure changes logged Infrastructure changes require review Infrastructure deployed using an infrastructure-as-code tool Key management policy established Production deployment access restricted Unauthorized assets addressed and removed Unique production database authentication enforced VPN used Web Application Firewall (WAF) used Monitoring and Incident Response Adequate audit log storage maintained Audit log management process maintained Breach notification process established Compliance monitoring processes defined and implemented Incident response exercises performed Incident response policy established Log management used Logging and monitoring policy established Threat intelligence established Organizational Security Acceptable use policy established Asset inventory maintained Asset management policy established Change management policy established Code of conduct acknowledged by contractors Code of conduct acknowledged by employees Code of conduct established Company security commitments externally communicated Confidentiality Agreement acknowledged by contractors Confidentiality Agreement acknowledged by employees Data-flow diagrams maintained Employment contracts used External support resources available (i.e., documentation) Human resource security policy established Information security communities identified Information security policy established Information security program established Internal privacy policies established Internal security audit performed Internal security communication maintained Leadership security commitment established Management review implemented Non-conformance and corrective action procedures established Offboarding process established Onboarding process established Operational procedures maintained Performance evaluations conducted Physical access restricted Physical security policy established Policies signed by relevant personnel Policy for compelled disclosure from law enforcement established Reference calls performed for employees Reference checks performed for employees Relevant authorities identified Remote work policy established Resources for ISMS available Roles and responsibilities specified Sanction policy established Scope for compliance framework established Security awareness training conducted Security official assigned Service description communicated Software development lifecycle established Statement of applicability completed System changes externally communicated System changes internally communicated Vendor agreements established Workstation use and security policy established Risk Management Compliance policy established Data Protection Impact Assessment (DPIA) completed Internal audit program defined Risk assessments performed Risk management policy established Risk owners identified Risk treatment plans established Software supply chain risks monitored Vendor inventory maintained Vendor management policy established Vendor management program established Vendors classified by data sensitivity Vendors classified by risk level Vulnerability Management Automated software patch management performed Penetration testing performed within the last 12 months Vulnerabilities scanned Vulnerability management policy acknowledged by employees Vulnerability management policy established