Compliance/Overview
Compliance overview
Control posture, audit schedule, and open findings as of the 20 July reporting cycle.
3 attestations due by 31 July. Two access-review controls are past their review date and one terminated-user finding is critical. Open findings register
Compliant controls
3
of 8 in scope
Open findings
4
1 critical, 1 high
Audits in progress
2
SOC 2 · PCI DSS v4
Overdue reviews
2
past review date
Control status distribution
Compliant · 4In review · 2Overdue · 2Draft · 1
Control status overview
View policy library| Ref | Control | Framework | Owner | Reviewed | Status |
|---|---|---|---|---|---|
| AC-2 | Account Management | SOC 2 | J. Marlowe | 2026-06-14 | Compliant |
Upcoming audits
- SOC 2 Type II — H1 2026Fieldwork
Harlow & Crane LLP
2026-08-15
Recent findings
| Finding | Severity | Control | Owner | Due | Status |
|---|---|---|---|---|---|
| MFA not enforced for 3 admin accounts | High | IA-5 | J. Marlowe | 2026-07-18 | Open |