(Satisfies SOC IS-1 Requirements)
3.2 Awareness & Training Policies
3.5 Identification and Authentication
3.13 Systems & Communications Protection
3.14 Systems & Information Integrity
| Standard | Category | Controls Satisfied | 800-53r4 Controls | ISO/SEC 27001 | Audit Controls |
|---|---|---|---|---|---|
| DLZP Internal | Governance | N/A | N/A | N/A |
| Date | Comment | Who |
|---|---|---|
| 8/27/2019 | Initial Doc | Tharp |
| 8/29/2019 | Copied Content For IS-1 SOC submission | Tharp |
| Reference ID | Task | Location | Description |
|---|---|---|---|
| IS-47 | Yes/M5-T27 | A-lign Tasks | Most recent VPN access review of users and user access rights by management |
| IS-47 | Yes/M5-T28 | A-lign Tasks | Next Quarter Review Task of T27 |
| IS-3; IS-6 | Yes/M5-T29 | A-lign Tasks | “Listing of all personnel hired between July 1; 2019 and September 13; 2019; Listing of all personnel terminated between July 1;2019 and September 13; 2019” |
| DLZP Wiki | Yes/M5-T30 | SaaS Rep&Tasks | Col: App Admin Rpt/Task; App User Rpt/Task; Log Review RPT/Task; Code Changes/Task |
| DLZP Wiki | Yes/M5-T31 | SaaS Rep&Tasks | Next Quarter Review Task of T30 |
| COA-2 | Yes/M5-T32 | A-lign Tasks | Listing of incidents from July 1; 2019 and September 13; 2019 |
| COA-2 | Yes/M5-T33 | A-lign Tasks | Next Quarter Review Task of T32 |
| CC-2 | Yes/M5-T34 | A-lign Tasks | Listing of all application code changes between July 1; 2019 and September 13; 2019 |
| CC-4 | Yes/M5-T35 | A-lign Tasks | Listing of all infrastructure changes between July 1; 2019 and September 13; 2019 |
| AWS - All | Yes/M5-T36 | SaaS Rep&Tasks | Col: App Admin Rpt/Task; App User Rpt/Task; Log Review RPT/Task |
| DB; Email; TrendMicro; CRM; Project | Yes/M5-T37 | SaaS Rep&Tasks | Col: App Admin Rpt/Task; App User Rpt/Task; Log Review RPT/Task + Antivirus Settings RPT/Task |
| Google Apps; | Yes/M5-T38 | SaaS Rep&Tasks | Col: App Admin Rpt/Task; App User Rpt/Task; Log Review RPT/Task |
| DLZP Internal | Yes/M5-T39 | Zoho Project Only | Review changes to NIST 800-171; NIST 800-53rev4; FIPS 199 |
| Documentation | Yes/M5-T40 | DokuWiki | Update Breach Notification |
| IS-3; IS-6 | Yes/M5-T41 | A-lign Tasks | Next Quarter Review Task of T29 |
| COA-8 | Yes/M5-T42 | A-lign Tasks | Disaster recovery plan test results (WIKI) |
| COA-8 | Yes/M5-T44 | A-lign Tasks | Next Quarter Review Task of T42 |
