This is the Compliance demo. Every visitor shares this company, and it resets every night.

What you change here, everyone sees until the next reset. Email, payments, and the AI models are switched off.

Sam de Vries

sam.devries@tidewell-it.example

Management of technical vulnerabilities

A.8.8

Cancel

Catalog reference

Identify, assess, and remediate technical vulnerabilities in systems and software in a timely way, with priority based on risk.

Narrative

Vulnerability scans run every quarter and critical patches have a seven-day target, which is not yet met on all customer endpoints.

How we satisfy this requirement. Auditors read this first.

Owner

Status Planned: decided but not yet in place. Implemented: deployed but not yet verified at scale. Operating: in steady-state with evidence trail.

Comments on this Requirement (0)