Snapshot 45750
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Monitored and Powered by Trust Center www.relevize.com [email protected] Compliance overview Current compliance status across frameworks SOC 2 Type 2 Compliant PCI DSS Compliant Featured documents Key security and compliance documentation Acceptable Use Policy Request access Access Control Policy Request access Asset Management Policy Request access View all documents Compliance Program An overview of security controls in place Access Control and Authorization Access granting process used Access management policy established Account inventory maintained Dormant accounts disabled Employee access regularly reviewed MFA required for critical services Password management policy enforced Password management policy established Data Management and Protection Data encrypted at rest Data encrypted in-transit Data inventory maintained Data management and retention policy established Disaster Recovery Automated backups enabled Business continuity and disaster recovery policy established Data recovery process established Disaster recovery plans tested Recovery data isolated Email Security DMARC policy and verification used Email account access restricted Email settings block malicious content Endpoint Security Anti-malware deployed on end-user devices Data encrypted on end-user devices Firewall maintained on end-user devices Infrastructure Security Active discovery tools used Administrator access restricted Automated security scanning performed on infrastructure Buckets not exposed publicly Configuration management system established Firewall restricts public access to infrastructure Infrastructure changes require review Infrastructure deployed using an infrastructure-as-code tool Unauthorized assets addressed and removed Unique production database authentication enforced VPN used Web Application Firewall (WAF) used Monitoring and Incident Response Adequate audit log storage maintained Audit log management process maintained Audit logs collected Incident response policy established Incident review process implemented Infrastructure performance monitored Log management used Network infrastructure monitored Organizational Security Acceptable use policy established Asset inventory maintained Asset management policy established Board charter documented Board oversight briefings conducted Change management policy established Changelog established and maintained Code of conduct established Company security commitments externally communicated Confidentiality Agreement acknowledged by contractors Data-flow diagrams maintained External support resources available (i.e., documentation) Offboarding process established Onboarding process established Password manager used Performance evaluations conducted Physical access restricted Reference checks performed for employees Roles and responsibilities specified Service description communicated Software development lifecycle established System changes externally communicated System changes internally communicated Vendor agreements established Whistleblower policy established Risk Management Risk assessments performed Risk management policy established Vendor inventory maintained Vendor management program established Vulnerability Management Automated software patch management performed Penetration testing findings remediated Penetration testing performed within the last 12 months Vulnerability management policy established