=====Audit Docs and Tasks===== ====Control Satisfaction Matrix==== ^Standard^Category^Controls Satisfied^800-53r4 Controls^ISO/SEC 27001^Audit Controls^ |DLZP Internal|Governance|N/A|N/A|N/A| ===Major Document History=== ^ Date ^ Comment ^ Who ^ | 8/27/2019 | Initial Doc | Tharp | | 8/29/2019 | Copied Content For IS-1 SOC submission | Tharp | ---- ====Recurring Task Summary==== ^Reference ID^Task^Location^Description^ |IS-47|Yes/M5-T27|A-lign Tasks|Most recent VPN access review of users and user access rights by management| |IS-47|Yes/M5-T28|A-lign Tasks|Next Quarter Review Task of T27| |IS-3; IS-6|Yes/M5-T29|A-lign Tasks|"Listing of all personnel hired between July 1; 2019 and September 13; 2019; Listing of all personnel terminated between July 1;2019 and September 13; 2019"| |DLZP Wiki|Yes/M5-T30|SaaS Rep&Tasks|Col: App Admin Rpt/Task; App User Rpt/Task; Log Review RPT/Task; Code Changes/Task| |DLZP Wiki|Yes/M5-T31|SaaS Rep&Tasks|Next Quarter Review Task of T30| |COA-2|Yes/M5-T32|A-lign Tasks|Listing of incidents from July 1; 2019 and September 13; 2019| |COA-2|Yes/M5-T33|A-lign Tasks|Next Quarter Review Task of T32| |CC-2|Yes/M5-T34|A-lign Tasks|Listing of all application code changes between July 1; 2019 and September 13; 2019| |CC-4|Yes/M5-T35|A-lign Tasks|Listing of all infrastructure changes between July 1; 2019 and September 13; 2019| |AWS - All|Yes/M5-T36|SaaS Rep&Tasks|Col: App Admin Rpt/Task; App User Rpt/Task; Log Review RPT/Task| |DB; Email; TrendMicro; CRM; Project|Yes/M5-T37|SaaS Rep&Tasks|Col: App Admin Rpt/Task; App User Rpt/Task; Log Review RPT/Task + Antivirus Settings RPT/Task| |Google Apps; |Yes/M5-T38|SaaS Rep&Tasks|Col: App Admin Rpt/Task; App User Rpt/Task; Log Review RPT/Task| |DLZP Internal|Yes/M5-T39|Zoho Project Only|Review changes to NIST 800-171; NIST 800-53rev4; FIPS 199| |Documentation|Yes/M5-T40|DokuWiki|Update Breach Notification| |IS-3; IS-6|Yes/M5-T41|A-lign Tasks|Next Quarter Review Task of T29| |COA-8|Yes/M5-T42|A-lign Tasks|Disaster recovery plan test results (WIKI)| |COA-8|Yes/M5-T44|A-lign Tasks|Next Quarter Review Task of T42|