Backup and DR processes are audited as part of the annual ISO 27001:2022 surveillance audit and the SOC 2 Type II examination conducted by an independent third-party auditor. These audits cover backup scheduling, encryption, retention, access controls, DR plan adequacy, and DR drill outcomes.
Is third-party/vendor access strictly controlled?
Third-party and vendor access is strictly controlled. Xoxoday performs regular security assessments of third-party companies, following a structured…
Is screening conducted for third-party (vendor) usage?
Screening is conducted for all third-party vendors. Xoxoday follows a structured due-diligence framework that includes evaluation of vendor security…