Entity has implemented data leakage prevention tools that monitor critical systems, networks, and devices that process, store, or transmit sensitive data
Entity has a documented Data Classification Policy, and makes it available for all staff on the company employee portal
Entity has a documented Physical Security Policy, and makes it available for all staff on the company employee portal
Entity ensures that the production databases access and Secure Shell access to infrastructure entities are protected from public internet access
Entity ensures that access to the production databases is restricted to only those individuals who require such access to perform their job functions.
Entity ensures logical access that is no longer required in the event of a termination is made inaccessible in a timely manner