Maturity monitoring

Actionable security controls based on your deployed solutions.

54 / 54

requiresSolutions

	Status	Impact	Difficulty
—	✓ evidence provided	Medium	Easy
—	✓ evidence provided	Medium	Medium
—	✓ evidence provided	High	Hard
—	✓ evidence provided	Critical	Medium
—	✓ evidence provided	High	Hard
—	✓ evidence provided	Medium	Medium
—	✓ evidence provided	Critical	Medium
—	✓ evidence provided	Critical	Hard
—		Critical	Medium
—		High	Medium
—		High	Easy
—		Medium	Easy
—		High	Medium
—	✓ evidence provided	Critical	Medium
Microsoft Entra ID	✓ evidence provided	Critical	Hard
—	✓ evidence provided	Critical	Easy
—	✓ evidence provided	Critical	Easy
—	✓ evidence provided	Critical	Medium
—	✓ evidence provided	Critical	Medium
—	✓ evidence provided	Critical	Medium
—		Critical	Easy
—		Critical	Medium
—		Critical	Hard
—		Critical	Medium
—		Critical	Medium
—		Critical	Medium
—		Critical	Medium
Microsoft Entra ID		High	Easy
Microsoft Entra ID		Medium	Easy
Microsoft Entra ID		Medium	Easy
—		Critical	Medium
—		High	Hard
—		Critical	Medium
—		Critical	Hard
CrowdStrike Falcon	✓ evidence provided	Critical	Easy
CrowdStrike Falcon	✓ evidence provided	High	Medium
CrowdStrike Falcon	✓ evidence provided	High	Easy
CrowdStrike Falcon	✓ evidence provided	Medium	Medium
CrowdStrike Falcon	✓ evidence provided	Critical	Easy
CrowdStrike Falcon	✓ evidence provided	High	Medium
CrowdStrike Falcon		High	Easy
CrowdStrike Falcon		Medium	Medium
CrowdStrike Falcon		Critical	Easy
CrowdStrike Falcon		High	Medium
CrowdStrike Falcon		High	Easy
CrowdStrike Falcon		Medium	Medium
CrowdStrike Falcon		Critical	Easy
CrowdStrike Falcon		High	Medium
CrowdStrike Falcon		High	Easy
CrowdStrike Falcon		Medium	Medium
CrowdStrike Falcon		Critical	Easy
CrowdStrike Falcon		High	Medium
CrowdStrike Falcon		High	Easy
CrowdStrike Falcon		Medium	Medium

GOV-001MediumEasyGovernance & Security Policy

Formalise and communicate the rights and responsibilities of administrators

💡

Why?

Administrators hold elevated privileges that can significantly impact information system security. Clearly formalising their responsibilities reduces the risk of abuse, human error, and non-compliance.

~4% estimated maturity score gain

⚙️

How?

1Draft or update the organisation’s IT acceptable use policy.
2Write a specific charter applicable to administrators.
3Obtain formal signatures from all administrators.
4Archive proof of acceptance.

📊

Indicators (KPIs)

Charter signature rate (%)
Date of last charter update

🗂️

Evidence elements

ManualSigned IT acceptable use policy
ManualHR signature register

📎

Attached files

No files attached yet.

Images or PDF · max 5 MB

📋

References & standards

ANSSI Guide Administration sécurisée v3.0 – R1Inform administrators of their rights and responsibilities
ISO/IEC 27001:2022 A.5.2Information security roles and responsibilities

✏️

Update

Status

Comment (optional)

Evidence / completion note

🕓

Evidence history

No recorded changes for this control.