%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M744%20-19C1119%20-19%201373%20196%201373%20529V1490H1020V558C1020%20401%20909%20289%20744%20289C581%20289%20469%20401%20469%20558V1490H116V529C116%20196%20367%20-19%20744%20-19Z'%20transform='translate(100.3688,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M116%200H1092V288H469V1490H116Z'%20transform='translate(124.5803,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M116%200H1092V288H469V1490H116Z'%20transform='translate(143.9432,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M691%20-20C1060%20-20%201280%20149%201280%20432C1280%20670%201113%20814%20825%20877L696%20907C563%20937%20476%20981%20476%201073C476%201156%20549%201217%20690%201217C832%201217%20911%201154%20921%201046H1260C1256%201322%201036%201510%20691%201510C353%201510%20111%201325%20111%201049C111%20825%20267%20696%20524%20637L682%20600C845%20563%20923%20518%20923%20433C923%20338%20833%20273%20687%20273C526%20273%20419%20347%20411%20492H72C78%20148%20318%20-20%20691%20-20Z'%20transform='translate(163.3061,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M792%20-20C888%20-20%20979%20-4%201062%2027L1183%20-117H1502L1278%20160C1416%20290%201500%20487%201500%20744C1500%201236%201191%201510%20792%201510C391%201510%2082%201236%2082%20744C82%20255%20391%20-20%20792%20-20ZM684%20531%20863%20296C840%20292%20817%20290%20792%20290C575%20290%20443%20450%20443%20744C443%201039%20575%201200%20792%201200C1008%201200%201140%201040%201140%20744C1140%20606%201111%20497%201057%20421L970%20531Z'%20transform='translate(185.5107,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M744%20-19C1119%20-19%201373%20196%201373%20529V1490H1020V558C1020%20401%20909%20289%20744%20289C581%20289%20469%20401%20469%20558V1490H116V529C116%20196%20367%20-19%20744%20-19Z'%20transform='translate(211.3629,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M47%200H439L536%20317H1032L1133%200H1529L1017%201490H544ZM619%20587%20639%20651C688%20820%20732%201008%20777%201209C825%201009%20874%20821%20926%20651L946%20587Z'%20transform='translate(235.5744,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M116%200H469V513H661L934%200H1321L1010%20569C1175%20643%201269%20789%201269%20995C1269%201299%201062%201490%20726%201490H116ZM469%20792V1204H651C817%201204%20903%201134%20903%20995C903%20856%20817%20792%20652%20792Z'%20transform='translate(261.0604,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M116%200H1149V288H469V612H1096V894H469V1202H1150V1490H116Z'%20transform='translate(283.3236,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3c/svg%3e)
Listo para la auditoría cada día, no solo en la semana de auditoría
La mayoría de las herramientas de cumplimiento te piden que afirmes cosas sobre ti y luego te devuelven esas afirmaciones como una puntuación. El búho prueba lo que se puede probar y, para lo demás, cita la cláusula de tu propia política. Sigue comprobando después de firmada la auditoría. Tu puntuación separa lo demostrado de lo que descansa en un documento. Un número que mezcla ambas cosas no dice nada sobre tu seguridad.
La vista del control.
Cómo llega un control a su resultado: las comprobaciones del agente, la evidencia asociada y aquello en lo que se apoya el veredicto.
The entity implements logical access security software and infrastructure over protected information assets
What must be true
Access to production systems is granted through a managed identity, is removed when that identity is removed, and cannot be obtained by any route that bypasses it.
Why this outcome
Access Control Policy v4, line 41: single sign-on is mandatory for all production systems and local accounts are prohibited. The agent then verified that claim against the identity provider — 5 of 5 production systems are federated and no local account exists on any of them. The policy states the obligation; the test is what passes the control.