Entity makes all policies and procedures available to all staff members via the company employee portal
Entity maintains a network diagram that identifies all connections between the environment housing the in-scope data and other networks
Entity requires that all staff members review and acknowledge company policies annually
The entity systems generate information that is reviewed and evaluated to determine impacts to the functioning of internal controls.
Entity has a documented Encryption Policy, and makes it available for all staff on the company employee portal
Entity has a documented Acceptable Usage Policy, and makes it available for all staff on the company employee portal