| HR-22 |
Organizational Strategy |
Leadership |
Amy Bagge-Smith |
quarterly |
60 |
1 / 1 |
| HR-20 |
Board Oversight |
Leadership |
Amy Bagge-Smith |
quarterly |
51 |
1 / 1 |
| PDP-16 |
Change Management Tooling |
DevOps |
Matthew Kindzerske |
quarterly |
28 |
1 / 2 |
| CUST-20 |
Support channel |
IT |
Matthew Kindzerske |
annual |
28 |
1 / 2 |
| INFRA-13 |
Web Application Firewall |
DevOps |
Matthew Kindzerske |
quarterly |
26 |
1 / 1 |
| AUTH-1 |
Single sign-on (SSO) |
IT |
Infra Team |
quarterly |
26 |
1 / 2 |
| BIZOPS-19 |
Security Incident - Tracking |
Security and Compliance |
Infra Team |
monthly |
25 |
1 / 1 |
| PDP-2 |
Restore Testing |
DevOps |
Infra Team |
quarterly |
23 |
1 / 1 |
| AUTH-5 |
User Access Review |
IT |
Matthew Kindzerske |
quarterly |
22 |
5 / 25 |
| AUTH-4 |
Least-privilege access |
IT |
Matthew Kindzerske |
quarterly |
20 |
1 / 18 |
| LOG-2 |
Logging of Administrative actions |
DevOps |
Matthew Kindzerske |
quarterly |
10 |
2 / 5 |
| BIZOPS-20 |
Security Incident - Change Management |
Security and Compliance |
Matthew Kindzerske |
monthly |
8 |
1 / 1 |
| AUTH-8 |
Requesting and approving access |
IT |
Matthew Kindzerske |
monthly |
8 |
1 / 1 |
| PDP-8 |
Change Management Approvals |
Engineering |
Matthew Kindzerske |
monthly |
7 |
1 / 2 |
| BIZOPS-27 |
Security Team Meetings |
Security and Compliance |
Matthew Kindzerske |
monthly |
7 |
1 / 2 |
| PDP-20 |
Emergency Changes |
Engineering |
Matthew Kindzerske |
monthly |
1 |
1 / 1 |
| PDP-9 |
Change Management - Tracking |
Engineering |
Unknown |
monthly |
1 |
1 / 1 |