Intelligence
Compliance Command Center
Requirements are only as good as their evidence. Expired evidence is treated as an open item, not a pass.
Requirements
4
Met
1
Open items
3
High risk
1
| Requirement | Authority | Control | Owner | Status | Evidence | Next review | Risk |
|---|---|---|---|---|---|---|---|
| Vendor security assessment before onboarding | Internal policy VS-04 (placeholder) | Pre-onboarding questionnaire + review | S. Idris | partial | 3 of 5 vendor files present | 2026-09-14 | moderate |
| Records retention schedule applied to matter files | Placeholder regulation AU-04 | Automated retention labels | P. Marsh | gap | No retention labels configured | 2026-08-01 | high |
| Annual privacy training completion | Internal policy PR-11 (placeholder) | Training platform attestation | S. Idris | met | Attestation export 2026-01 | 2027-01-20 | low |
| Subprocessor list kept current | Contractual — Arclight MSA | Quarterly list review | L. Ruiz | expired evidence | Last export dated 2025-09 | 2026-06-30 | moderate |