Compliance

This is the Compliance demo. Every visitor shares this company, and it resets every night.

What you change here, everyone sees until the next reset. Email, payments, and the AI models are switched off.

Start your own trial
  • EU GDPR (2016)
  • ISO 27001:2022
  • NIS2
  • NIS2 Netherlands (Cbw, 2026)

Nothing found that matches the search criteria.

Start your own trial
SV
Sam de Vries
sam.devries@tidewell-it.example

Edit FND-001

Cancel
Description

The internal audit sampled the access rights reviews of the last four quarters and found no record of a review for two of them. The Service Desk Lead owns the review, and the quarterly reminder had lapsed when the previous reminder owner moved to another team. Administrator rights on the identity provider were therefore not confirmed against the staff list for half a year, which the Access Control Policy does not allow.

    Comments on this Finding (0)

    Add comment

      Are you sure?

      This action cannot be reverted.

      Leave this page?

      Your changes on this form are not saved. If you leave, they are lost.