security:soc https://wiki.cloud.dlzpgroup.com/ 2026-06-23T15:03:17+0000 https://wiki.cloud.dlzpgroup.com/ https://wiki.cloud.dlzpgroup.com/lib/tpl/dokuwiki/images/favicon.ico text/html 2019-04-13T19:24:43+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:aotp https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:aotp&rev=1555183483&do=diff Access Onboarding and Termination Policy ACME Evil Anvil Corporation March 2019 Table 1: Control satisfaction Standard Controls SatisfiedTSCCC6.1, CC6.2, CC6.3 Table 2: Document history Date Comment Jun 1 2018 Initial document Purpose and Scope * text/html 2019-04-12T14:05:31+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:ap https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:ap&rev=1555077931&do=diff Availability Policy ACME Evil Anvil Corporation March 2019 Contents 1 Purpose and Scope 2 2 Background 2 3 References 2 4 Policy 2 Table 1: Control satisfaction Standard Controls SatisfiedTSC A1.1, CC9.1 Table 2: Document history Date CommentJun 1 2018 text/html 2019-05-03T15:40:14+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:asp https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:asp&rev=1556898014&do=diff Application Security Policy ACME Evil Anvil Corporation March 2019 Contents 1 Purpose and Scope 2 2 Background 2 3 References 2 4 Policy 2 Table 1 - Control Satisfaction StandardNIST CategoryControls SatisfiedAudit ControlsNIST 800-53rev4Familyaa## text/html 2019-04-13T14:16:29+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:bcp https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:bcp&rev=1555164989&do=diff Business Continuity Policy ACME Evil Anvil Corporation March 2019 Contents 1 Purpose and Scope 2 Background 3 Policy Table 1: Control satisfaction Standard Controls SatisfiedTSC CC9.1 Table 2: Document history Date CommentJun 1 2018 Initial document text/html 2019-04-13T14:29:48+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:cen https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:cen&rev=1555165788&do=diff Control Environment Narrative ACME Evil Anvil Corporation March 2019 Contents * Control Environment Narrative * Logical Controls * Policy Controls * Procedural Controls * Scheduled Security and Audit Procedures * Event-Driven Security and Audit Procedures text/html 2019-04-12T13:28:33+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:cntrl https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:cntrl&rev=1555075713&do=diff name: Control Environment Narrative acronym: CEN satisfies: TSC: - CC2.1 - CC2.2 - CC2.3 - CC4.1 - CC4.2 - CC5.1 - CC5.2 - CC5.3 majorRevisions: * date: Jun 1 2018 comment: Initial document --- # Control Environment Narrative text/html 2019-05-13T23:40:11+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:cocp https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:cocp&rev=1557790811&do=diff Code of Conduct Policy ACME Evil Anvil Corporation March 2019 Contents * Purpose and Scope Table 1 - Control Satisfaction StandardNIST CategoryControls SatisfiedAudit ControlsNIST 800-53rev4Familyaa##1.02, 1.03 Table 2 - Major Document History text/html 2019-05-13T23:40:27+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:cp https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:cp&rev=1557790827&do=diff Confidentiality Policy ACME Evil Anvil Corporation March 2019 Contents * Purpose and Scope * Background * Policy Controls Satisfied StandardNIST CategoryControls SatisfiedAudit ControlsNIST 800-53rev4Familyaa##1.02, 1.03 Major Document History text/html 2019-05-13T23:40:45+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:crp https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:crp&rev=1557790845&do=diff Cyber Risk Assessment Policy ACME Evil Anvil Corporation March 2019 Contents * Purpose and Scope * Background * Procedure To Execute Risk Assessment Report Table 1 - Control Satisfaction StandardNIST CategoryControls SatisfiedAudit Controls text/html 2019-04-13T15:25:47+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:dcp https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:dcp&rev=1555169147&do=diff Data Classification Policy ACME Evil Anvil Corporation March 2019 Contents * Appendices * Purpose and Scope * Background * References * Policy * Appendix A: Handling of Classified Information Table 1: Control satisfaction Standard Controls Satisfied text/html 2019-05-13T23:41:03+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:dp https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:dp&rev=1557790863&do=diff Datacenter Policy ACME Evil Anvil Corporation March 2019 Contents * Purpose and Scope * Background * Policy StandardNIST CategoryControls SatisfiedAudit ControlsNIST 800-53rev4Familyaa##1.02, 1.03 Major Document History DateCommentWho5/1/2019 text/html 2019-04-13T15:56:03+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:drp https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:drp&rev=1555170963&do=diff Disaster Recovery Policy ACME Evil Anvil Corporation March 2019 Contents * Background * Policy * Appendix A: Relevant Points of Contact * Appendix B: Recovery Steps for Information Systems Infrastructure & Services Table 1: Control satisfaction text/html 2019-04-13T16:18:56+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:ep https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:ep&rev=1555172336&do=diff Encryption Policy ACME Evil Anvil Corporation March 2019 Contents * Purpose and Scope * Background * Policy Table 1: Control satisfaction Standard Controls SatisfiedTSC CC9.9 Table 2: Document history Date CommentJun 1 2018 Initial document text/html 2019-04-13T16:40:44+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:isp https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:isp&rev=1555173644&do=diff Information Security Policy ACME Evil Anvil Corporation March 2019 Contents * Purpose and Scope * Background * References * Policy Table 1: Control satisfaction Standard Controls SatisfiedTSC CC9.9 Table 2: Document history Date CommentJun 1 2018 text/html 2019-04-13T17:34:18+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:lmp https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:lmp&rev=1555176858&do=diff Log Management Policy ACME Evil Anvil Corporation March 2019 Contents * Purpose and Scope * Background * Policy Table 1: Control satisfaction Standard Controls SatisfiedTSC CC7.2 Table 2: Document history Date CommentJun 1 2018 Initial document text/html 2019-04-13T18:10:00+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:mcp https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:mcp&rev=1555179000&do=diff Removable Media and Cloud Storage Policy ACME Evil Anvil Corporation March 2019 Contents * Purpose and Scope * Background * References * Policy Table 1: Control satisfaction Standard Controls SatisfiedTSC CC6.7 Table 2: Document history Date text/html 2019-05-13T23:39:47+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:on https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:on&rev=1557790787&do=diff Organizational Narrative Org Narrative Template March 2019 Contents * Organizational Narrative * Entity Type * Integrity and Ethics * Board Independence * Organizational Structure * Management Objectives * Risk to Objectives * Fraud Risk to Objectives text/html 2019-04-12T13:28:46+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:org https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:org&rev=1555075726&do=diff name: Organizational Narrative acronym: ON satisfies: TSC: - CC1.2 - CC1.3 - CC1.4 - CC1.5 - CC3.1 - CC3.2 - CC3.3 majorRevisions: * date: Jun 1 2018 comment: Initial document --- # Organizational Narrative The following provides a description of the corporate a management structure of text/html 2019-04-13T19:25:31+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:osp https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:osp&rev=1555183531&do=diff Office Security Policy ACME Evil Anvil Corporation March 2019 Contents * Purpose and Scope * Policy Table 1: Control satisfaction Standard Controls SatisfiedTSC CC6.4 Table 2: Document history Date CommentJun 1 2018 Initial document 1 Purpose and Scope text/html 2019-04-13T18:48:38+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:pip https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:pip&rev=1555181318&do=diff Processing Integrity Policy ACME Evil Anvil Corporation March 2019 Contents * Coming Soon Table 1: Control satisfaction Standard Controls SatisfiedTSC PI1.1, PI1.2, PI1.3, PI1.4, PI1.5 Table 2: Document history Date CommentJun 1 2018 Initial document text/html 2019-04-13T18:58:47+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:pmp https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:pmp&rev=1555181927&do=diff Privacy Management Policy ACME Evil Anvil Corporation March 2019 Contents * Coming Soon Table 1: Control satisfaction Standard Controls SatisfiedTSC P1.1, P2.1, P3.1, P3.2, P4.1, P4.2, P4.3, P5.1, P5.2, P6.1, P6.2, P6.3, P6.4, P6.5, P6.6, P6.7, P7.1, P8.1 text/html 2019-04-12T13:29:13+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:product https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:product&rev=1555075753&do=diff name: Products and Services Narrative acronym: PSN majorRevisions: * date: Jun 1 2018 comment: Initial document --- # Products Narrative Here we describe the key products marketed by our organization # Products ## Product 1 Overview of product 1 text/html 2019-04-13T19:02:17+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:psn https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:psn&rev=1555182137&do=diff Products and Services Narrative ACME Evil Anvil Corporation March 2019 Contents * Products Narrative * Products * Product * Architecture * Security Considerations * References * Narratives * Policies * Procedures text/html 2019-04-13T19:26:06+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:ptp https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:ptp&rev=1555183566&do=diff Policy Training Policy ACME Evil Anvil Corporation March 2019 Contents * Purpose and Scope * Applicability Table 1: Control satisfaction Standard Controls SatisfiedTSC CC9.9 Table 2: Document history Date CommentJun 1 2018 Initial document Purpose and Scope text/html 2019-04-13T19:26:41+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:pwp https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:pwp&rev=1555183601&do=diff Password Policy ACME Evil Anvil Corporation March 2019 Contents * Purpose and Scope * Policy Table 1: Control satisfaction Standard Controls SatisfiedTSC CC9.9 Table 2: Document history Date CommentJun 1 2018 Initial document Purpose and Scope text/html 2019-04-13T19:27:10+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:reap https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:reap&rev=1555183630&do=diff Remote Access Policy ACME Evil Anvil Corporation March 2019 Contents * Purpose and Scope * Background * Policy Table 1: Control satisfaction Standard Controls SatisfiedTSC CC6.1, CC6.2, CC6.7 Table 2: Document history Date CommentJun 1 2018 text/html 2019-04-13T19:41:57+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:riap https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:riap&rev=1555184517&do=diff Risk Assessment Policy ACME Evil Anvil Corporation March 2019 Contents * Purpose and Scope * Background * References * Policy Table 1: Control satisfaction Standard Controls SatisfiedTSC CC9.1 Table 2: Document history Date CommentJun 1 2018 text/html 2019-04-13T20:01:28+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:rp https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:rp&rev=1555185688&do=diff Data Retention Policy ACME Evil Anvil Corporation March 2019 Contents * Purpose and Scope * Background * Policy * Appendix A: Retention Periods Table 1: Control satisfaction Standard Controls SatisfiedTSC CC1.2, CC6.5, P4.2 Table 2: Document history text/html 2019-04-13T20:03:14+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:san https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:san&rev=1555185794&do=diff System Architecture Narrative ACME Evil Anvil Corporation March 2019 Contents * System Architecture Narrative * Template Coming Soon Table 1: Document history Date CommentJun 1 2018 Initial document System Architecture Narrative Here we narrate why our org satisfies the control keys listed in the YML block text/html 2019-04-13T20:13:21+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:scp https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:scp&rev=1555186401&do=diff System Change Policy ACME Evil Anvil Corporation March 2019 Contents * Purpose and Scope * Background * Policy Table 1: Control satisfaction Standard Controls SatisfiedTSC CC8.1, CC3.4 Table 2: Document history Date CommentJun 1 2018 Initial document text/html 2019-04-13T20:29:03+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:sdlcp https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:sdlcp&rev=1555187343&do=diff Software Development Lifecycle Policy ACME Evil Anvil Corporation March 2019 Contents * Purpose and Scope * Background * References * Policy Table 1: Control satisfaction Standard Controls SatisfiedTSC CC8.1 Table 2: Document history Date text/html 2019-04-12T13:29:28+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:security https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:security&rev=1555075768&do=diff name: Security Architecture Narrative acronym: SEN satisfies: TSC: - CC6.6 - CC6.7 - CC7.1 - CC7.2 majorRevisions: * date: Jun 1 2018 comment: Initial document --- # Security Architecture Narrative Here we narrate why our org satisfies the control keys listed in the YML block text/html 2019-04-13T20:47:11+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:sen https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:sen&rev=1555188431&do=diff Security Architecture Narrative ACME Evil Anvil Corporation March 2019 Contents * Security Architecture Narrative * ACME Evil Anvil Corporation Product Architecture * ACME Evil Anvil Corporation Infrastructure * Product Infrastructure * text/html 2019-04-13T21:09:24+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:si https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:si&rev=1555189764&do=diff System and Information Integrity (SI) ACME Evil Anvil Corporation March 2019 Contents * SI-2 Flaw Remediation (L) (M) (H) * SI-2 (2) Control Enhancement (M) (H) * SI-2 (3) Control Enhancement (M) (H) * SI-3 Malicious Code Protection (L) (M) text/html 2019-04-13T22:04:45+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:sirp https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:sirp&rev=1555193085&do=diff Security Incident Response Policy ACME Evil Anvil Corporation March 2019 Contents * Purpose and Scope * Background * Policy * Procedure For Establishing Incident Response System * Procedure For Executing Incident Response Table 1: Control satisfaction text/html 2019-04-12T13:29:48+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:system https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:system&rev=1555075788&do=diff name: System Architecture Narrative acronym: SAN majorRevisions: * date: Jun 1 2018 comment: Initial document --- # System Architecture Narrative Here we narrate why our org satisfies the control keys listed in the YML block # Template Coming Soon text/html 2019-04-13T22:10:39+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:vmp https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:vmp&rev=1555193439&do=diff Vendor Management Policy ACME Evil Anvil Corporation March 2019 Contents * Purpose and Scope * Background * References * Policy Table 1: Control satisfaction Standard Controls SatisfiedTSC CC9.2 Table 2: Document history Date CommentJun 1 2018 text/html 2019-04-13T22:14:45+0000 Anonymous (anonymous@undisclosed.example.com) security:soc:wp https://wiki.cloud.dlzpgroup.com/doku.php?id=security:soc:wp&rev=1555193685&do=diff Workstation Policy ACME Evil Anvil Corporation March 2019 Contents * Purpose and Scope * Policy Table 1: Control satisfaction Standard Controls SatisfiedTSC CC6.8 Table 2: Document history Date CommentJun 1 2018 Initial document Purpose and Scope