Entity ensures that logical access provisioning to critical systems requires approval from authorised personnel on an individual need or for a predefined role
Entity has developed an Access Control policy and an accompanying process to register and authorize users for issuing system credentials which grant the ability to access the critical systems
Entity’s Senior Management segregates responsibilities and duties across the organization to mitigate risks to the services provided to its customers
Entity has developed a set of policies that establish expected behavior with regard to the Company’s control environment.
Entity reviews and evaluates all subservice organizations periodically, to ensure commitments to Entity’s customers can be met
Entity ensures clarity in job responsibilities for client serving, IT and engineering positions (via OKRs, Job Descriptions etc.) to increase the operational effectiveness of the organisation