Compliance

This is the Compliance demo. Every visitor shares this company, and it resets every night.

What you change here, everyone sees until the next reset. Email, payments, and the AI models are switched off.

Start your own trial
  • EU GDPR (2016)
  • ISO 27001:2022
  • NIS2
  • NIS2 Netherlands (Cbw, 2026)

Nothing found that matches the search criteria.
Start your own trial
SV
Sam de Vries
sam.devries@tidewell-it.example
Legal

Applicability (also known as the Statement of Applicability (SoA))

Code
Category
Title
State
Owner
Policies
A.5.1
Organizational
Policies for information security
Applicable
Assigned
1
A.5.2
Organizational
Information security roles and responsibilities
Applicable
Assigned
3
A.5.3
Organizational
Segregation of duties
Applicable
Assigned
2
A.5.4
Organizational
Management responsibilities
Applicable
Assigned
2
A.5.5
Organizational
Contact with authorities
Applicable
Assigned
1
A.5.6
Organizational
Contact with special interest groups
Not yet reviewed
No value
0
A.5.7
Organizational
Threat intelligence
Applicable
Assigned
0
A.5.8
Organizational
Information security in project management
Applicable
Assigned
1
A.5.9
Organizational
Inventory of information and other associated assets
Applicable
Assigned
1
A.5.10
Organizational
Acceptable use of information and other associated assets
Applicable
Assigned
1
A.5.11
Organizational
Return of assets
Applicable
Assigned
3
A.5.12
Organizational
Classification of information
Applicable
Assigned
1
A.5.13
Organizational
Labelling of information
Applicable
Assigned
0
A.5.14
Organizational
Information transfer
Applicable
Assigned
2
A.5.15
Organizational
Access control
Applicable
Assigned
2
A.5.16
Organizational
Identity management
Applicable
Assigned
3
A.5.17
Organizational
Authentication information
Applicable
Assigned
4
A.5.18
Organizational
Access rights
Applicable
Assigned
6
A.5.19
Organizational
Information security in supplier relationships
Applicable
Assigned
3
A.5.20
Organizational
Addressing information security within supplier agreements
Applicable
Assigned
3
A.5.21
Organizational
Managing information security in the ICT supply chain
Applicable
Assigned
3
A.5.22
Organizational
Monitoring, review and change management of supplier services
Applicable
Assigned
4
A.5.23
Organizational
Information security for use of cloud services
Applicable
Assigned
2
A.5.24
Organizational
Information security incident management planning and preparation
Applicable
Assigned
6
A.5.25
Organizational
Assessment and decision on information security events
Applicable
Assigned
2
A.5.26
Organizational
Response to information security incidents
Applicable
Assigned
2
A.5.27
Organizational
Learning from information security incidents
Applicable
Assigned
2
A.5.28
Organizational
Collection of evidence
Applicable
Assigned
0
A.5.29
Organizational
Information security during disruption
Applicable
Assigned
5
A.5.30
Organizational
ICT readiness for business continuity
Applicable
Assigned
5
A.5.31
Organizational
Legal, statutory, regulatory and contractual requirements
Applicable
Assigned
0
A.5.32
Organizational
Intellectual property rights
Not yet reviewed
No value
0
A.5.33
Organizational
Protection of records
Applicable
Assigned
0
A.5.34
Organizational
Privacy and protection of PII
Applicable
Assigned
2
A.5.35
Organizational
Independent review of information security
Applicable
Assigned
1
A.5.36
Organizational
Compliance with policies, rules and standards for information security
Applicable
Assigned
3
A.5.37
Organizational
Documented operating procedures
Applicable
Assigned
3
A.6.1
People
Screening
Applicable
Assigned
3
A.6.2
People
Terms and conditions of employment
Applicable
Assigned
2
A.6.3
People
Information security awareness, education and training
Applicable
Assigned
5
A.6.4
People
Disciplinary process
Applicable
Assigned
2
A.6.5
People
Responsibilities after termination or change of employment
Applicable
Assigned
3
A.6.6
People
Confidentiality or non-disclosure agreements
Applicable
Assigned
3
A.6.7
People
Remote working
Applicable
Assigned
1
A.6.8
People
Information security event reporting
Applicable
Assigned
5
A.7.1
Physical
Physical security perimeters
Applicable
Assigned
2
A.7.2
Physical
Physical entry
Applicable
Assigned
3
A.7.3
Physical
Securing offices, rooms and facilities
Applicable
Assigned
3
A.7.4
Physical
Physical security monitoring
Applicable
Assigned
0
A.7.5
Physical
Protecting against physical and environmental threats
Applicable
Assigned
4
A.7.6
Physical
Working in secure areas
Applicable
Assigned
3
A.7.7
Physical
Clear desk and clear screen
Applicable
Assigned
2
A.7.8
Physical
Equipment siting and protection
Applicable
Assigned
2
A.7.9
Physical
Security of assets off-premises
Applicable
Assigned
0
A.7.10
Physical
Storage media
Applicable
Assigned
0
A.7.11
Physical
Supporting utilities
Applicable
Assigned
2
A.7.12
Physical
Cabling security
Applicable
Assigned
1
A.7.13
Physical
Equipment maintenance
Not yet reviewed
No value
0
A.7.14
Physical
Secure disposal or re-use of equipment
Applicable
Assigned
2
A.8.1
Technological
User end point devices
Applicable
Assigned
5
A.8.2
Technological
Privileged access rights
Applicable
Assigned
6
A.8.3
Technological
Information access restriction
Applicable
Assigned
5
A.8.4
Technological
Access to source code
Applicable
Assigned
2
A.8.5
Technological
Secure authentication
Applicable
Assigned
4
A.8.6
Technological
Capacity management
Applicable
Assigned
0
A.8.7
Technological
Protection against malware
Applicable
Assigned
7
A.8.8
Technological
Management of technical vulnerabilities
Applicable
Assigned
4
A.8.9
Technological
Configuration management
Applicable
Assigned
4
A.8.10
Technological
Information deletion
Applicable
Assigned
2
A.8.11
Technological
Data masking
Excluded
No value
0
A.8.12
Technological
Data leakage prevention
Applicable
Assigned
0
A.8.13
Technological
Information backup
Applicable
Assigned
2
A.8.14
Technological
Redundancy of information processing facilities
Applicable
Assigned
4
A.8.15
Technological
Logging
Applicable
Assigned
3
A.8.16
Technological
Monitoring activities
Applicable
Assigned
3
A.8.17
Technological
Clock synchronization
Applicable
Assigned
1
A.8.18
Technological
Use of privileged utility programs
Not yet reviewed
No value
0
A.8.19
Technological
Installation of software on operational systems
Applicable
Assigned
2
A.8.20
Technological
Networks security
Applicable
Assigned
3
A.8.21
Technological
Security of network services
Applicable
Assigned
2
A.8.22
Technological
Segregation of networks
Applicable
Assigned
3
A.8.23
Technological
Web filtering
Applicable
Assigned
0
A.8.24
Technological
Use of cryptography
Applicable
Assigned
1
A.8.25
Technological
Secure development life cycle
Applicable
Assigned
2
A.8.26
Technological
Application security requirements
Applicable
Assigned
1
A.8.27
Technological
Secure system architecture and engineering principles
Applicable
Assigned
0
A.8.28
Technological
Secure coding
Applicable
Assigned
2
A.8.29
Technological
Security testing in development and acceptance
Applicable
Assigned
0
A.8.30
Technological
Outsourced development
Excluded
No value
0
A.8.31
Technological
Separation of development, test and production environments
Applicable
Assigned
0
A.8.32
Technological
Change management
Applicable
Assigned
2
A.8.33
Technological
Test information
Applicable
Assigned
0
A.8.34
Technological
Protection of information systems during audit testing
Not yet reviewed
No value
0

Are you sure?

This action cannot be reverted.

Leave this page?

Your changes on this form are not saved. If you leave, they are lost.