Information Is any change in status intended to Security include termination of employment, contract or agreement, change of employment or transfer within the organization? Information User Access Reviews Do you require at least annual Security certification of entitlements for all system users and administrators (exclusive of users maintained by your tenants)? Information If users are found to have Security inappropriate entitlements, are all remediation and certification actions recorded? Information Will you share user entitlement Security remediation and certification reports with your tenants, if inappropriate access may have been allowed to tenant data? Information Training / Do you provide Security Awareness (describe/explain/attach/embed associated documents) or make available a formal security awareness training program for cloud-related access and data management issues (i.e., multi-tenancy, nationality, cloud delivery model segregation of duties implications, and conflicts of interest) for all persons with access to tenant data? Information Are administrators and data stewards Security properly educated on their legal responsibilities with regard to security and data integrity? Information Industry Knowledge Do you participate in industry groups Security / Benchmarking and professional associations related to information security?
Information Security Is any change in status intended to include termination of employment, contract or agreement, change of employment or transfer within the organization? Information Security User Access Reviews Do you require at least annual certification of entitlements for all system users and administrators (exclusive of users maintained by your tenants)? Information Security If users are found to have inappropriate entitlements, are all remediation and certification actions recorded? Information Security Will you share user entitlement remediation and certification reports with your tenants, if inappropriate access may have been allowed to tenant data? Information Security Training / Awareness Do you provide (describe/explain/attach/embed associated documents) or make available a formal security awareness training program for cloud-related access and data management issues (i.e., multi-tenancy, nationality, cloud delivery model segregation of duties implications, and conflicts of interest) for all persons with access to tenant data? Information Security Are administrators and data stewards properly educated on their legal responsibilities with regard to security and data integrity? Information Security Industry Knowledge / Benchmarking Do you participate in industry groups and professional associations related to information security?
405329717.docx