Published controls
The company declares every control listed here as implemented, with evidence linked.
Organizational security
How the company governs security day to day.
Security policy
Your organisation has a written information security policy approved by management and communicated to all staff.
Information classification
Information is classified according to its sensitivity and the legal, contractual, and business requirements for its protection.
Security roles and responsibilities
Security responsibilities are clearly defined and assigned to specific people across the organisation.
Legal and regulatory compliance
Legal, statutory, regulatory, and contractual requirements relevant to information security are identified and met.
Technology security
How systems, data and access are protected technically.
Managing technical vulnerabilities
Information about technical vulnerabilities is obtained, the organisation's exposure is evaluated, and appropriate action is taken.
Published by Kardu GRC via kardu·eu · Kardu does not audit or certify this information