Digital Trust,
proven live at the AWS Summit.
Meet Cybervergent at AWS Summit Johannesburg. See how governance, compliance, risk, data security and privacy converge into one continuously assured posture on AWS, and register your interest to reserve time with our team on the day.
Trusted by the teams behind the emerging markets’ digital economy
See continuous assurance, live on AWS.
CybervergentMCGood morning, María
Access Provisioning Policy.docxSynced from Storage · version 4 draftView documentRequest attestationcustomer_export.csv · analytics-archive247 records · emails, card PANs · Data Retention Policy 4.2Policy violationQuarantine nowMask fieldsGap 1 · Least-privilege in production · SOC 2 CC6.1Standing admin access found on production data storesRemediateRaise exceptionRisk treatmentEvery control tested, every gap owned, and evidence always fresh, not a point-in-time scramble.
Get reportStatement of ApplicabilityInvite auditor
ISO 27001COBITInternalAccess Provisioning PolicyAccess Provisioning Policy
1. Purpose
This policy governs how access to production systems and regulated data is requested, approved, reviewed and revoked, so that every grant is justified, least-privilege and fully evidenced.
2. Scope
Applies to all employees, contractors and service accounts across cloud and on-premise systems in scope for ISO 27001 and COBIT.
3. Policy statements
- Access is granted on a documented, role-based, least-privilege basis.
- Privileged actions require segregation of duties with independent approval.
- Access is reviewed at least quarterly and revoked within 24 hours of role change.
- All grants, approvals and revocations are logged as tamper-evident evidence.
4. Review
Reviewed quarterly by the control owner and attested by the accountable owner.
Access Provisioning Policy · MonitoringOkta · 61/64PassingAWS · 38/38PassingOkta · 12/12PassingOkta · 3/6FailingAWS · 44/44PassingAWS · 96/96PassingOkta · 58/60PassingAWS · 214/214PassingAWS · 118/126PassingTestsMFA enforced on privileged rolesEncryption at rest on data storesQuarterly access reviews completeContractor accounts require MFASanctions screening coverageBackup and restore drill
One live posture
Governance, compliance, risk, data security and privacy unified across your AWS environment and on-premise systems, continuously updated and ready the moment anyone asks.
Always audit-ready
Evidence is gathered automatically as your team works, from SOC 2 and ISO 27001 to POPIA, so assurance becomes continuous rather than a once-a-year scramble.
AI-native, on AWS
Datavergent Assist connects to your stack, tests controls against live evidence and drafts remediation, purpose-built for how cloud-first teams operate.
Adopt any framework in days, not months
Every framework, pre-built or custom, maps into one control graph that runs compliance, risk, data security, audit and governance.
Meet us at the Summit.
Register your interest and we’ll reserve time with our team, a live walkthrough of the platform, and priority notice for our Summit session.
✓A live walkthrough tailored to your environment✓Dedicated time with the Cybervergent team✓Priority notice for our Summit session✓Early access to your own Trust Center
I’m interested
Cybervergent was named a Technology Pioneer by the World Economic Forum. SOC 2 Type II examination completed by an independent AICPA-accredited auditor; ISO/IEC 27001 and ISO/IEC 42001 certified via MSECB. AWS, Amazon Web Services and the AWS logo are trademarks of Amazon.com, Inc. or its affiliates. All third-party names and marks referenced on this page, including AWS, the World Economic Forum, AICPA, MSECB, PCI DSS and ISO, are trademarks of their respective owners, are used for identification only, and do not imply endorsement of Cybervergent or its products.