FEHA Logo
FEHA

ANS Group

a leading UK-based digital transformation, cloud, and cybersecurity technology provider.

Contact us
support@ans.co.uk
IT Services & Consulting

Resources

Access Control Configuration Procedure

An Access Control Configuration Procedure is a documented process that defines how user permissions, roles, group memberships, and access controls are configured, reviewed, modified, and revoked to ensure that access to organizational systems and information is properly authorized and securely managed.

Private

Consent Management Policy

A Consent Management Policy is an organizational framework that dictates how a business collects, documents, manages, and honors user permission for handling personal data. It ensures that organizations comply with global privacy laws (such as GDPR or CCPA) and allows consumers to control how their data is used.

Private

Data Processing Agreements (DPAs)

A Data Processing Agreement (DPA) is a legally binding contract between a data controller (the entity that decides how and why data is processed) and a data processor (the third party handling the data). It mandates how personal information is managed, secured, and protected to ensure compliance with privacy laws.

Private

In Progress Compliance

This score is determined through an assessment performed by our FEHAGRC Consultant tes.

SOC 2COMPLIANCEMONITOREDBY FEHA

SOC 2

28 of 84 measures implemented

1 Measures

Encryption / Cryptography

Encryption Policy
1 Measures

Documentation & Transparency

On-boarding Records
1 Measures

Correction

Nonconformity and Corrective Action Register
4 Measures

Internal Audit

Internal Audit Programme
Audit Procedures/Methodology
Internal Audit Report
2 Measures

Business Continuity

Business Continuity Plan
Disaster Recovery Plan
5 Measures

Incident Management

AI Concerns Reporting Procedure (Whistleblowing Policy)
Incident Report
Incident Response Plan
1 Measures

Equipment

Secure Disposal or Re-use of Equipment Procedure
1 Measures

Site Security

Physical Security Policy
3 Measures

Vulnerability Management

Penetration Testing Report
Threat Assessment Report
Vulnerability Scanning Report
1 Measures

Test Information

Test Data Management Policy or Procedure
1 Measures

Source Code

Secure Coding Guidelines
2 Measures

Secure Development

Software Development Life Cycle
Technical Development Guidelines for AI Fairness and Safety
1 Measures

Backups

Information Backup Policy
3 Measures

Endpoint Security

Antivirus/Anti-malware Software Deployment and Update Logs
Device Configuration Standards or Baselines
Screen Lock Configuration
1 Measures

Data Masking

Data Masking Policy
2 Measures

Secure Authentication

Multi-Factor Authentication (MFA) Implementation Records
Password Policy
2 Measures

Logging & Monitoring

Configuration Management Records
Endpoint Management System Records
2 Measures

Network Security

Network Security Policy
WAF configuration
1 Measures

Data at Rest

Data-at-Rest Encryption Standard
1 Measures

Data in Transit

Data-in-Transit Encryption Standard
5 Measures

Access Control

Access Control Policy
Access Reviews Documentation
Privileged Utility Program Usage Logs
7 Measures

Data Protection

Data Classification Policy
Data Protection Policy
Data Provenance Log
3 Measures

Inventory

Asset Management Policy
Asset Register
Document Distribution Records
2 Measures

Remote Working

Examples of Security Reminders
Remote Working Policy
3 Measures

Training

Certifications and Qualifications
Role-Based Security Training Plan
Training Records
3 Measures

Onboarding/Offboarding

Contracts or Agreements with Outsourced Developers
Acceptable Use Policy
Off-boarding Checklist
3 Measures

Recruitment

Code of Conduct
Personnel Background Verification
Template Employment Contract
1 Measures

Vendor Management

Vendor Management Policy
2 Measures

Objectives

AI Objective Action Plan
Information Security Objectives
6 Measures

Management Documentation

Budget Allocation Records
Internal Wiki
Management Review Meeting
2 Measures

Change Management

Change Management Policy
Change Request Forms / Change Log
6 Measures

Risk Management

AI Impact Assessment Report
AI System Impact Assessment (AIIA) Procedure
Risk Assessment Input
5 Measures

Interested Parties

Customer Contracts/SLAs
List of contact special interest groups
Register of Interested Parties and Their Requirements
6 Measures

Legal & Regulatory

Data Processing Agreements (DPAs)
Applicable Laws and Regulations
Data Protection Impact Assessment (DPIA)
2 Measures

Roles & Responsibilities

Organizational Charts
Roles and Responsibilities
6 Measures

Management System Documentations

AI Management System Implementation Plan
Context Analysis Document
Information Security Management System (ISMS) Plan