Insurance information security
IS-02Draft
Monitor access and protective controls
How Leela would run itContinuous · on access changes and security alerts
Proposed stepsThe requirement
Apply access, authentication, encryption and monitoring controls appropriate to the applicable provisions and recorded risks. Route exceptions to the authorized approver with a compensating control and expiry date.
- Before this work
- Connected identity and security systems Approved control criteria and exception permissions
- Applies
- Tell Leela about your company to see whether this applies.
- Status
- Setup needed
Tell Leela how you handle it today, or hand it over: see what’s next.
How Leela would run it · proposed steps
- LeelaCollect access and protective-control evidence and check it against approved requirements.Proposed step
- LeelaTrack exception owners, compensating controls and expiry dates, escalating missing evidence.Proposed step
- Security operations leadSecurity owners approve access changes, compensating controls and risk exceptions.Your team decides
What Leela keepsThe evidence this obligation leaves, as the work happens
Listed from the policy libraryContents
- 01Access review, control evidence and exception registerControlled record with date, owner, source and review history
Evidence
Access review, control evidence and exception register
Insurance information security §3.2
1
of 1 record
The steps are the library’s proposed workflow for this obligation: a description of the work, not a run. The records are its evidence in the library.