ASSOCIATED DRATA CONTROL
This test is part of the Customer Data Policies control that ensures your Management team has approved all necessary policies that detail how customer data should be handled and made accessible to others. This test will also ensure that these policies are accessible to all employees and contractors.
WHAT TO DO IF A TEST FAILS
If Drata finds that your company policies are either not available or do not reflect the necessary requirements and procedure, for either granting employees access or revoking access to customer data, the test will fail.
To remediate a failed test, you will need to make sure that the appropriate policies are uploaded to Drata and contain specific requirements for granting/revoking access to customer data. These policies will also need to be approved by an owner for the test to succeed.
STEPS TO REMEDIATE
Navigate to the Policy Center.
Add either the 'Acceptable Use Policy' and/or 'Data Protection Policy' and ensure that the newly added policy(s) are approved.
HELPFUL RESOURCES