Evidence
Evidence
Compliance evidence and supporting documentation
Overview
This section contains the evidence and supporting documentation for our ISMS compliance. All evidence is maintained as structured markdown tables with git history providing the audit trail.
Evidence Register
| Document | Description | Last Verified | Owner | Review Cycle |
|---|---|---|---|---|
| Architecture Diagram | Technical architecture of the NextSDS platform | 2026-07-30 | CTO | Quarterly |
| Asset Inventory | Physical devices and systems (8 devices) | 2026-07-02 | CTO | Quarterly |
| Software Inventory | Software platforms and applications (31 entries) | 2026-07-03 | CTO | Quarterly |
| Cloud Infrastructure | Cloud deployments and services (12 providers, 6 deployments) | 2026-07-30 | CTO | Quarterly |
| Backup & Restore Test | Backup strategy and restore-test record | 2026-06-23 | CTO | Quarterly |
| Risk Register | Identified risks with scoring (13 risks) | 2026-07-30 | CEO | Quarterly |
| Security Testing | SAST/SCA, dependency and secret scanning, pentest status | 2026-06-23 | CTO | Quarterly |
| Self-Assessment Attestation | CyFun Basic self-assessment attestation signed by CEO | 2026-03-11 | CEO | Annual |
| Access Matrix | User access rights (27 systems, 3 users) | 2026-07-02 | CTO | Quarterly |
| Incident Log | Security incidents and lessons (1 incident) | 2026-05-14 | CTO | Ongoing |
| Training Log | Security awareness training (0/5 completed, rescheduled Q3 2026) | 2026-07-02 | CEO | Annual |
The Subprocessor Register (third-party processors, hosting regions, and DPA status) is published publicly under the Trust Center.