Live workspace. Durable storage schema active — live connectors, billing, and AI automation are activation-gated.View Activation Status
Signed out
Sign in as the approved QA user before running RLS-bound QA.
Sign in
Back to control matrix
Read-only automation evaluation - no live writes

Access control

Rules to control physical and logical access to information and assets shall be established.

ISO 27001
A.5.15
security

Readiness evaluation

Partial
high
Automation rationale
Deterministic explanation from evidence, gaps, and open findings.
No required evidence type is verified at high confidence.
Required evidence
Evidence types expected for this control.
system config
log export
Linked evidence
Sample evidence mapped to this control.

IAM policy export

Exported IAM bindings for review of least-privilege adherence.

Pending review

Confidence: medium · Owner: Sam Okafor

Linked findings
Open or historical findings mapped to this control.
high
In remediation

Risky service account with long-lived key

Reduce the role to least privilege and disable the unused key.

Recommended remediation workflow
Preview recommendation only; no workflow instance is created here.

Review AI system classification

Re-assess the risk classification and registration of an AI system. SLA 72h.

Open workflow template
Audit trail placeholder
Future live audit trails will show reviewer decisions, evidence refreshes, and workflow transitions.
Catalog imported: ISO 27001
Last evaluated: May 29, 2026
Mode: local deterministic preview