Threat intelligence: define the intelligence question and owner
3 pages
Compliance documents
Policies, templates, forms and checklists. Preview any document before downloading.
Threat intelligence: control intelligence sharing
2 pages
Test data and environment management: time-limit test access
2 pages
Test data and environment management: select the minimum sufficient data method
3 pages
Supplier security: supplier change notices and responsible recipients
2 pages
Supplier security: supplier personnel assignments
2 pages
Supplier assurance: select due diligence for credible failure conditions
2 pages
Supplier assurance: trace service dependencies and control points
2 pages
Source code repository and secrets: onboard people and automation separately
2 pages
Supplier assurance: monitor service behavior and changing conditions
2 pages
Supplier assurance: define the service and operating boundary
3 pages
Supplier assurance: assess assurance evidence within its scope
3 pages