Monitor access and protective controls

Insurance information security policy, §3.2

Apply access, authentication, encryption and monitoring controls appropriate to the applicable provisions and recorded risks. Route exceptions to the authorized approver with a compensating control and expiry date.

Continuous

On access changes and security alerts

Apply access, authentication, encryption and monitoring controls appropriate to the applicable provisions and recorded risks. Route exceptions to the authorized approver with a compensating control and expiry date.

• Access review, control evidence and exception register

  Controlled record with date, owner, source and review history

Security operations lead

Leela can track evidence, dates and exceptions once the scope and connected data are configured; a person resolves regulatory judgments.

Tell Leela about your company to see whether this applies.