Entity’s Senior Management or the Information Security Officer periodically reviews and ensures that access to the critical systems is restricted to only those individuals who require such access to perform their job functions
Sep 08, 2023

Entity appoints a Compliance Program Manager who is delegated the responsibility of planning and implementing the internal control environment
Sep 08, 2023

Entity appoints a People Operations Officer to develop and drive forward all HR security-related strategies across the company
Sep 08, 2023

Entity has a documented HR Security Policy, and makes it available for all staff on the company employee portal
Sep 08, 2023

Entity’s infrastructure is configured to generate audit events for actions of interest related to security for all critical systems
Sep 08, 2023

Entity has documented Business Continuity Policy, that establish guidelines and procedures on continuing business operations in case of a disruption or a security incident
Sep 08, 2023