Entity has developed an Access Control policy and an accompanying process to register and authorize users for issuing system credentials which grant the ability to access the critical systems
Sep 07, 2023

Entity’s Senior Management segregates responsibilities and duties across the organization to mitigate risks to the services provided to its customers
Sep 07, 2023

Entity has developed a set of policies that establish expected behavior with regard to the Company’s control environment.
Sep 07, 2023

Entity reviews and evaluates all subservice organizations periodically, to ensure commitments to Entity’s customers can be met
Sep 07, 2023

Entity’s Senior Management reviews and approves the “Vendor Risk Assessment Report” annually.
Sep 07, 2023

Entity’s Infosec officer reviews and approves the list of people with access to production console annually
Sep 07, 2023