Entity requires that all staff members complete Information Security Awareness training annually
Entity requires that new staff members complete Information Security Awareness training upon hire
Entity has a documented Data Classification Policy, and makes it available for all staff on the company employee portal
Entity ensures that the production databases access and Secure Shell access to infrastructure entities are protected from public internet access
Entity ensures that access to the production databases is restricted to only those individuals who require such access to perform their job functions.
Entity ensures logical access that is no longer required in the event of a termination is made inaccessible in a timely manner