Entity performs a formal risk assessment exercise annually, as detailed out in the Risk Assessment and Management Policy, to identify threats that could impair systems’ security commitments and requirements
Entity has provided information to customers on how to report failures, incidents, concerns, or other complaints related to the services or systems provided by the Entity in the event there are problems.
Entity appoints an owner of Infrastructure operations, who is responsible for all assets in the inventory
Entity has provided information to employees, via the Information Security Policy, on how to report failures, incidents, concerns, or other complaints related to the services or systems provided by the Entity in the event there are problems.
Entity displays the most current information about its services on its website, which is accessible to its customers.
Entity has a documented Password Policy and makes it available to all staff members on the company employee portal