Tag
Audit Evidence
2 articles tagged “Audit Evidence”.
-
Provider Incident Evidence Retention: Keep It Past 90 Days
AWS, Azure, Google, Cloudflare and GitHub drop most incident history within 30-90 days. How to keep provider evidence for SOC 2, SOX and PCI change audits.
-
Zammad KEV: When Your Helpdesk Becomes the Breach Path
CISA added two Zammad flaws to KEV after a breach at DIVD. What the chain exposes, why the vendor and CSIRT disagree, and how to treat your helpdesk.