WayFold Compliance

Gap Assessment

8 righe · filtri server-side · click controllo → coverage/delta/evidence/task

FrameworkRequirementControlMapping StatusOwnerDeadlineEvidenceTasksGapNotes
Framework A (ISO-like)
2013.1		A.5.1
Access control policy		CTRL-IAM-002
Access control policy baseline		FULLIN_PROGRESS—2026-09-0701Policy baseline covers ISO access control policy
Framework A (ISO-like)
2013.1		A.5.2
Privileged access review annual		CTRL-IAM-001
Privileged access management		PARTIALIMPLEMENTEDadmin@wayfold.local2026-10-0710ISO requires annual privileged access review; PAM currently enforces continuous authz onlyPAM covers privileged access but review cadence differs
Framework A (ISO-like)
2013.1		A.9.9
Exotic logging format		—
UNMAPPEDUNMAPPED——00No approved mapping to a canonical control
Framework B (NIS2-like)
2026.1		NIS2-IAM
Privileged access controls		CTRL-IAM-001
Privileged access management		PARTIALIMPLEMENTEDadmin@wayfold.local2026-10-0710NIS2 expects semi-annual review of privileged accountsPAM supports NIS2 privileged access; semi-annual review missing
Framework B (NIS2-like)
2026.1		NIS2-IR
Incident response capability		CTRL-IR-001
Incident response runbook		FULLNOT_IMPLEMENTED——00IR runbook maps fully
Framework B (NIS2-like)
2026.1		NIS2-X9
Sector-specific reporting channel		—
UNMAPPEDUNMAPPED——00No approved mapping to a canonical control
Framework C (CSF-like)
2.0		PR.AA-01
Identity and credentials		CTRL-IAM-001
Privileged access management		FULLIMPLEMENTEDadmin@wayfold.local2026-10-0710ISO requires annual privileged access review; PAM currently enforces continuous authz only; NIS2 expects semi-annual review of privileged accounts; Full recovery plan / BCP still required beyond IAMCSF identity/credentials covered by PAM
Framework C (CSF-like)
2.0		RC.RP-01
Recovery plan		CTRL-IAM-001
Privileged access management		SUPPORTINGIMPLEMENTEDadmin@wayfold.local2026-10-0710Full recovery plan / BCP still required beyond IAMPAM supports recovery identity restoration only