Security Governance & ISMS
Control domain with explicit source/evidence and limitation.
If the table is wider than its frame, scroll horizontally to see all columns; use arrow keys when the table region has focus.
| Domain | Relevance to Sign | Evidence required | Limitation |
|---|---|---|---|
| Governance | Policy, risk owners and ISMS scope | ISO / official policy | Requires deployment evidence; cannot be inferred from a certification logo. |
| IAM | Least privilege, privileged access, review and revocation | Access matrix / access history | Requires deployment evidence; cannot be inferred from a certification logo. |
| Data protection | Classification, purpose, retention and access | Data policy / deployment record | Requires deployment evidence; cannot be inferred from a certification logo. |
| Application security | Bind documents, sessions, redirects and callbacks | Design / assessment results | Requires deployment evidence; cannot be inferred from a certification logo. |
| Secure development | Change review, dependencies and vulnerability handling | Release / test records | Requires deployment evidence; cannot be inferred from a certification logo. |
| Monitoring | Track failures, states and correlation | Redacted logs / alerts | Requires deployment evidence; cannot be inferred from a certification logo. |
| Incident response | Triage, contain, recover and notify | Incident / exercise records | Requires deployment evidence; cannot be inferred from a certification logo. |
| Continuity | Failover, recovery and uncertain-state reconciliation | Plan / recovery evidence | Requires deployment evidence; cannot be inferred from a certification logo. |
| Supplier | CA/RSSP, identity and billing boundaries and responsibilities | Contract / responsibility matrix | Requires deployment evidence; cannot be inferred from a certification logo. |
| Audit | Connect actors, documents, decisions and outcomes | Transaction evidence / review records | Requires deployment evidence; cannot be inferred from a certification logo. |