This is the Compliance demo. Every visitor shares this company, and it resets every night.

What you change here, everyone sees until the next reset. Email, payments, and the AI models are switched off.

Sam de Vries

sam.devries@tidewell-it.example

Information security event reporting

A.6.8 - Last updated 6 hours ago Applicable

Edit

Catalog reference

Provide a clear mechanism for personnel to report observed or suspected information security events promptly, without friction or fear of blame.

Staff report a suspected security event to the service desk by phone or ticket, and the on-call engineer triages the report.

Code

Title

Status

RSK-005

Phishing of service desk staff leading to access to a customer tenant

Treating

RSK-014

A personal data breach is not reported within 72 hours

Open

RSK-018

Theft or loss of a field engineer laptop

Mitigated