ASSOCIATED DRATA CONTROL
This test is part of the Disclosure Process for Employees control that ensures your company provides a process for employees to report concerns around security, confidentiality, integrity, availability failures, and incidents.
WHAT TO DO IF A TEST FAILS
If Drata finds that your company policies do not detail a process for employees to report concerns around security, confidentiality, integrity, availability failures, and incidents the test will fail.
To remediate a failed test, you will need to ensure that the appropriate policy has been uploaded to Drata and that the policy contains a specific section detailing the employee process for responsible disclosure.
STEPS TO REMEDIATE
Navigate to the Policy Center.
Add a 'Responsible Disclosure Policy' and ensure that the newly added policy is approved.
HELPFUL RESOURCES