Compliance

This is the Compliance demo. Every visitor shares this company, and it resets every night.

What you change here, everyone sees until the next reset. Email, payments, and the AI models are switched off.

Start your own trial
  • EU GDPR (2016)
  • ISO 27001:2022
  • NIS2
  • NIS2 Netherlands (Cbw, 2026)

Nothing found that matches the search criteria.

Start your own trial
SV
Sam de Vries
sam.devries@tidewell-it.example

New change

Cancel
Description Edit the default text
Loading...

Summary

Impact

Approval

Plan

Fallback

Follow-up

Evaluation

    A link to the matching item in your tracker, such as a Jira, GitHub or Linear issue.
    • RSK-001 — Ransomware on the managed hosting platform
    • RSK-002 — Compromise of the remote management platform
    • RSK-003 — Loss of customer backup data in a data centre failure
    • RSK-004 — Privileged credential theft from an engineer laptop
    • RSK-005 — Phishing of service desk staff leading to access to a customer tenant
    • RSK-006 — Misconfigured customer firewall exposes an internal service
    • RSK-007 — Unauthorised access to the privileged credential vault
    • RSK-008 — Failure of a colocation provider
    • RSK-009 — Power or cooling failure in a data centre
    • RSK-010 — One engineer holds the knowledge of a customer platform
    • RSK-011 — Departing employee keeps access to customer systems
    • RSK-012 — Late patching of customer endpoints
    • RSK-013 — Personal data in service desk tickets is handled carelessly
    • RSK-014 — A personal data breach is not reported within 72 hours
    • RSK-015 — SLA penalties after repeated incidents at one customer
    • RSK-016 — Stage 2 audit finds a major nonconformity
    • RSK-017 — A sub-processor changes without notice to customers
    • RSK-018 — Theft or loss of a field engineer laptop
    • RSK-019 — Unmanaged devices on the office network
    • RSK-020 — Physical intrusion at a data centre
    • RSK-021 — Incident reporting duties under the Cbw are not met
    • RSK-022 — Insufficient monitoring coverage on customer networks
    • RSK-023 — Customer data is not removed when a contract ends
    • RSK-024 — Unpatched firmware on network equipment
    • RSK-025 — Outage of the Microsoft 365 service
    • RSK-026 — Excessive administrator rights on internal systems
    • RSK-027 — Data loss during a customer migration project
    • RSK-028 — Disruption during the move to the Utrecht office
    • RSK-029 — Legacy hosting platform without vendor support
    • RSK-030 — Misuse of customer data by staff

    Nothing found that matches the search criteria.

    • AST-001 — Customer configuration database
    • AST-002 — Customer contracts and SLAs
    • AST-003 — Customer network diagrams
    • AST-004 — Privileged credential vault contents
    • AST-005 — Backup catalogues and encryption keys
    • AST-006 — Employee HR records
    • AST-007 — Financial administration
    • AST-008 — ISMS documentation
    • AST-009 — Monitoring and audit logs
    • AST-010 — Public website content
    • AST-011 — Remote monitoring and management platform
    • AST-012 — Service desk ticketing system
    • AST-013 — Virtualisation platform
    • AST-014 — Backup software
    • AST-015 — Endpoint detection and response agents
    • AST-016 — Identity provider and single sign-on
    • AST-017 — Documentation wiki
    • AST-018 — Customer VPN gateway software
    • AST-019 — Legacy hosting control panel
    • AST-020 — Core network switches, data centre A
    • AST-021 — Core network switches, data centre B
    • AST-022 — Perimeter firewalls
    • AST-023 — Hypervisor hosts, data centre A
    • AST-024 — Hypervisor hosts, data centre B
    • AST-025 — Primary storage arrays
    • AST-026 — Employee laptop fleet
    • AST-027 — Mobile device fleet
    • AST-028 — Hardware security keys
    • AST-029 — Next-generation firewall refresh
    • AST-031 — Contractor laptop of Imogen Clarke
    • AST-032 — Microsoft 365 tenant
    • AST-033 — Colocation space, data centre A
    • AST-034 — Colocation space, data centre B
    • AST-035 — Internet and transit connectivity
    • AST-036 — Offsite backup storage
    • AST-037 — FortiGate appliances at customer sites
    • AST-038 — Network engineering expertise
    • AST-039 — Service desk team knowledge
    • AST-040 — Utrecht office

    Nothing found that matches the search criteria.

    Are you sure?

    This action cannot be reverted.

    Leave this page?

    Your changes on this form are not saved. If you leave, they are lost.