Compliance

This is the Compliance demo. Every visitor shares this company, and it resets every night.

What you change here, everyone sees until the next reset. Email, payments, and the AI models are switched off.

Start your own trial
  • EU GDPR (2016)
  • ISO 27001:2022
  • NIS2
  • NIS2 Netherlands (Cbw, 2026)

Nothing found that matches the search criteria.
Start your own trial
SV
Sam de Vries
sam.devries@tidewell-it.example
Legal

Edit FND-002

Cancel
Description

The audit compared the leaver list of the last two quarters with the moments the accounts were disabled. Several accounts stayed active for two or three working days after the last day, because the notice from HR reached the service desk only at the end of the week. The Access Control Policy sets a target of 24 hours, and the audit counted the late accounts as a gap in that target.
    Comments on this Finding (2)

    Comments

    Lotte van Dijk ·

    The effectiveness check showed the same gap as the audit did: some leavers kept an active account for more than a day.

    I think the checklist reaches us too late, @Sam de Vries. Can we have HR trigger the disable step the moment a leaving date is known?

    Sam de Vries ·

    Agreed. I will ask the HR Lead to send the leaving date to the service desk on the day it is known.

    We re-check after the next three leavers.

    Add comment

      Are you sure?

      This action cannot be reverted.

      Leave this page?

      Your changes on this form are not saved. If you leave, they are lost.