%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M744%20-19C1119%20-19%201373%20196%201373%20529V1490H1020V558C1020%20401%20909%20289%20744%20289C581%20289%20469%20401%20469%20558V1490H116V529C116%20196%20367%20-19%20744%20-19Z'%20transform='translate(100.3688,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M116%200H1092V288H469V1490H116Z'%20transform='translate(124.5803,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M116%200H1092V288H469V1490H116Z'%20transform='translate(143.9432,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M691%20-20C1060%20-20%201280%20149%201280%20432C1280%20670%201113%20814%20825%20877L696%20907C563%20937%20476%20981%20476%201073C476%201156%20549%201217%20690%201217C832%201217%20911%201154%20921%201046H1260C1256%201322%201036%201510%20691%201510C353%201510%20111%201325%20111%201049C111%20825%20267%20696%20524%20637L682%20600C845%20563%20923%20518%20923%20433C923%20338%20833%20273%20687%20273C526%20273%20419%20347%20411%20492H72C78%20148%20318%20-20%20691%20-20Z'%20transform='translate(163.3061,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M792%20-20C888%20-20%20979%20-4%201062%2027L1183%20-117H1502L1278%20160C1416%20290%201500%20487%201500%20744C1500%201236%201191%201510%20792%201510C391%201510%2082%201236%2082%20744C82%20255%20391%20-20%20792%20-20ZM684%20531%20863%20296C840%20292%20817%20290%20792%20290C575%20290%20443%20450%20443%20744C443%201039%20575%201200%20792%201200C1008%201200%201140%201040%201140%20744C1140%20606%201111%20497%201057%20421L970%20531Z'%20transform='translate(185.5107,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M744%20-19C1119%20-19%201373%20196%201373%20529V1490H1020V558C1020%20401%20909%20289%20744%20289C581%20289%20469%20401%20469%20558V1490H116V529C116%20196%20367%20-19%20744%20-19Z'%20transform='translate(211.3629,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M47%200H439L536%20317H1032L1133%200H1529L1017%201490H544ZM619%20587%20639%20651C688%20820%20732%201008%20777%201209C825%201009%20874%20821%20926%20651L946%20587Z'%20transform='translate(235.5744,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M116%200H469V513H661L934%200H1321L1010%20569C1175%20643%201269%20789%201269%20995C1269%201299%201062%201490%20726%201490H116ZM469%20792V1204H651C817%201204%20903%201134%20903%20995C903%20856%20817%20792%20652%20792Z'%20transform='translate(261.0604,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3cpath%20d='M116%200H1149V288H469V612H1096V894H469V1202H1150V1490H116Z'%20transform='translate(283.3236,32.9131)%20scale(0.0146484,-0.0146484)'%20fill='%23F5F5F7'/%3e%3c/svg%3e)
Prêt pour l’audit chaque jour, pas seulement la semaine de l’audit
La plupart des outils de conformité vous font affirmer des choses sur vous-même, puis vous renvoient ces affirmations sous forme de score. Le hibou teste ce qui peut l’être et cite, pour le reste, la clause de votre propre politique. Il continue de vérifier après la signature de l’audit. Votre score sépare ce qui a été prouvé de ce qui repose sur un document. Un chiffre qui mélange les deux ne dit rien de votre sécurité.
La vue du contrôle.
Comment un contrôle arrive à son résultat : les vérifications de l'agent, les preuves qui lui sont rattachées et ce sur quoi repose le verdict.
The entity implements logical access security software and infrastructure over protected information assets
What must be true
Access to production systems is granted through a managed identity, is removed when that identity is removed, and cannot be obtained by any route that bypasses it.
Why this outcome
Access Control Policy v4, line 41: single sign-on is mandatory for all production systems and local accounts are prohibited. The agent then verified that claim against the identity provider — 5 of 5 production systems are federated and no local account exists on any of them. The policy states the obligation; the test is what passes the control.