Entity requires that all staff members with access to any critical system is protected with a secure login mechanism such as Multifactor-authentication
profile_icon
| Sep 08, 2023
Entity maintains and periodically reviews the inventory of systems which are critical to security commitments and requirements
profile_icon
| Sep 08, 2023
Entity requires that all staff members complete Information Security Awareness training annually
profile_icon
| Sep 08, 2023
Entity requires that new staff members complete Information Security Awareness training upon hire
profile_icon
| Sep 08, 2023
Entity maintains a list of legal, statutory, and regulatory requirements relevant to information security
profile_icon
| Sep 08, 2023
Entity requires that all company-owned endpoints to be protected from access to external websites using web filtering technologies to reduce exposure to malicious content
profile_icon
| Sep 08, 2023