When users are found to have inappropriate entitlements, all remediation actions are recorded. The access review process documents the finding, the corrective action taken (revocation or modification), the responsible personnel, and the timestamp.
Does Xoxoday have an information security awareness program?
Xoxoday runs a formal security awareness program with mandatory training, phishing simulations, and annual policy acknowledgments aligned to ISO…
Does Xoxoday have physical security controls in place?
Yes. Xoxoday maintains comprehensive physical security controls and policies protecting its infrastructure, data centres, and customer data…