Compliance

This is the Compliance demo. Every visitor shares this company, and it resets every night.

What you change here, everyone sees until the next reset. Email, payments, and the AI models are switched off.

Start your own trial
  • EU GDPR (2016)
  • ISO 27001:2022
  • NIS2
  • NIS2 Netherlands (Cbw, 2026)

Nothing found that matches the search criteria.
Start your own trial
SV
Sam de Vries
sam.devries@tidewell-it.example
Legal

Risks

New risk
Risk matrix
4 Critical 13 High 10 Medium 0 Low
Impact 1
Impact 2
Impact 3
Impact 4
Impact 5
Likelihood 5
0 0 0 0 0
Likelihood 4
0 0 3 2 1
Likelihood 3
0 1 5 6 1
Likelihood 2
0 0 1 2 4
Likelihood 1
0 0 0 0 1
Low (1–4) Medium (5–9) High (10–14) Critical (15–25)
Code
Title
Inherent
Residual
Status
Category
Requirements
RSK-001
Ransomware on the managed hosting platform
4 × 5 = 20
2 × 4 = 8
Treating
Technological
6
RSK-002
Compromise of the remote management platform
3 × 5 = 15
2 × 5 = 10
Treating
Technological
5
RSK-003
Loss of customer backup data in a data centre failure
2 × 5 = 10
1 × 4 = 4
Mitigated
Operational
4
RSK-004
Privileged credential theft from an engineer laptop
4 × 4 = 16
2 × 3 = 6
Treating
Technological
4
RSK-005
Phishing of service desk staff leading to access to a customer tenant
4 × 4 = 16
3 × 3 = 9
Treating
Technological
4
RSK-006
Misconfigured customer firewall exposes an internal service
3 × 4 = 12
2 × 3 = 6
Treating
Operational
4
RSK-007
Unauthorised access to the privileged credential vault
2 × 5 = 10
1 × 4 = 4
Mitigated
Technological
5
RSK-008
Failure of a colocation provider
3 × 4 = 12
2 × 4 = 8
Treating
Supplier
6
RSK-009
Power or cooling failure in a data centre
2 × 4 = 8
2 × 3 = 6
Accepted
Operational
4
RSK-010
One engineer holds the knowledge of a customer platform
4 × 3 = 12
3 × 3 = 9
Treating
People
3
RSK-011
Departing employee keeps access to customer systems
3 × 4 = 12
1 × 3 = 3
Mitigated
People
5
RSK-012
Late patching of customer endpoints
4 × 3 = 12
2 × 2 = 4
Treating
Technological
4
RSK-013
Personal data in service desk tickets is handled carelessly
3 × 4 = 12
2 × 3 = 6
Treating
Compliance
6
RSK-014
A personal data breach is not reported within 72 hours
2 × 5 = 10
No value
Open
Compliance
4
RSK-015
SLA penalties after repeated incidents at one customer
3 × 3 = 9
No value
Open
Financial
3
RSK-016
Stage 2 audit finds a major nonconformity
2 × 4 = 8
No value
Open
Reputational
4
RSK-017
A sub-processor changes without notice to customers
3 × 3 = 9
No value
Open
Compliance
No value
RSK-018
Theft or loss of a field engineer laptop
3 × 3 = 9
1 × 2 = 2
Mitigated
Operational
6
RSK-019
Unmanaged devices on the office network
3 × 2 = 6
No value
Open
Technological
No value
RSK-020
Physical intrusion at a data centre
1 × 5 = 5
1 × 4 = 4
Accepted
Operational
4
RSK-021
Incident reporting duties under the Cbw are not met
3 × 4 = 12
2 × 3 = 6
Treating
Compliance
5
RSK-022
Insufficient monitoring coverage on customer networks
3 × 4 = 12
2 × 3 = 6
Treating
Operational
5
RSK-023
Customer data is not removed when a contract ends
2 × 3 = 6
1 × 2 = 2
Treating
Compliance
5
RSK-024
Unpatched firmware on network equipment
4 × 3 = 12
2 × 3 = 6
Treating
Technological
4
RSK-025
Outage of the Microsoft 365 service
3 × 3 = 9
3 × 3 = 9
Accepted
Supplier
4
RSK-026
Excessive administrator rights on internal systems
3 × 3 = 9
1 × 2 = 2
Mitigated
Technological
5
RSK-030
Misuse of customer data by staff
2 × 5 = 10
1 × 4 = 4
Accepted
People
6
27 total
Page 1 of 1

Are you sure?

This action cannot be reverted.

Leave this page?

Your changes on this form are not saved. If you leave, they are lost.