Completed Compliance
Frameworks verified by consultant
ISO 27001:2022
112 measures implemented
ISO 42001:2023
70 measures implemented
Resources
Responsible Disclosure Policy
This policy encourages security researchers and users to report vulnerabilities in FEHA’s systems responsibly and in good faith. Outlines safe channels for disclosure and ensures reporters will not face legal action if they follow the guidelines.
Approved at 21st Feb, 2025 at 06:03:04
Public
AI Governance Policy
This AI Governance Policy establishes a structured framework for the ethical and responsible development, deployment, and use of Artificial Intelligence (AI) within FEHA.
Approved at 21st Feb, 2025 at 06:06:21
Public
FEHA ISO 27001 Certificate
ISO 27001 Certificate demonstrates our commitment to maintaining a robust Information Security Management System (ISMS) and protecting information assets through a systematic, risk-based approach to information security.
Approved at 27th Mar, 2026 at 10:02:31
Public
In Progress Compliance
This score is determined through an assessment performed by our FEHAGRC Consultant.
GDPR
23 of 26 measures implemented
SOC 2
59 of 72 measures implemented
6 Measures
Privacy
Consent Forms
Opt In and Out Procedures
Privacy Policy
2 Measures
Encryption / Cryptography
Cryptographic Configuration Standards and Implementation Records
Encryption Policy
1 Measures
Correction
Nonconformity and Corrective Action Register
3 Measures
Internal Audit
Audit Procedures/Methodology
Internal Audit Programme
Internal Audit Report
5 Measures
Business Continuity
Business Continuity Plan
Business Impact Analysis (BIA)
Data Backup Configuration
6 Measures
Incident Management
AI Concerns Reporting Procedure (Whistleblowing Policy)
External Communication Plan
Incident Report
4 Measures
Vulnerability Management
Technical Vulnerability Management Records
Threat Assessment Report
Vulnerability Scanning Report
6 Measures
Source Code
Access Control Configurations for Source Code Repositories
Code of Conduct
Documentation of Development Environment Security
13 Measures
Secure Development
AI Development Standard Operating Procedure (SOP)
Business Case for AI-based Solution
Code Review Sample
4 Measures
Backups
Backup Schedule and Success Logs
Clock Synchronization Documentation
Information Backup Policy
3 Measures
Endpoint Security
Antivirus/Anti-malware Software Deployment and Update Logs
Device Configuration Standards or Baselines
Screen Lock Configuration
2 Measures
Data Masking
Data Masking Documentation
Data Masking Policy
4 Measures
Secure Authentication
Multi-Factor Authentication (MFA) Implementation Records
Password Policy
Procedures for Managing Authentication Credentials
9 Measures
Logging & Monitoring
Access Control Configurations
AI Log Monitoring Configuration and Performance Records
Alerting System Configurations and Logs
4 Measures
Network Security
IDS/IPS logs
Network Diagram
Network Security Policy
4 Measures
Access Control
Access Control Policy
Access Reviews Documentation
Records of Privileged Account Inventory
17 Measures
Data Protection
AI Data Sensitivity Analysis Report
Bias Assessment Reports and Data Balancing Logs
Data Acquisition Log
7 Measures
Inventory
AI Tooling Version Control Records
AIMS Awareness Training Logs
Asset Management Policy
2 Measures
Remote Working
Examples of Security Reminders
Remote Working Policy
7 Measures
Training
AI Competence Assessment Matrix
Certifications and Qualifications
Role-Based Security Training Plan
8 Measures
Onboarding/Offboarding
Acceptable Use Policy
AI System Approval Records
AI System Procurement & Use Policy
2 Measures
Recruitment
Personnel Background Verification
Template Employment Contract
2 Measures
Objectives
AI Objective Action Plan
Information Security Objectives
9 Measures
Management Documentation
AIMS Performance Measurement Plan
Budget Allocation Records
Compliance Monitoring and Reporting Records
2 Measures
Change Management
Change Management Policy
Change Request Forms / Change Log
6 Measures
Risk Management
AI Impact Assessment Report
AI Risk Criteria Document
AI System Impact Assessment (AIIA) Procedure
6 Measures
Interested Parties
Customer Contracts/SLAs
Customer Usage Disclosures
List of contact special interest groups
6 Measures
Legal & Regulatory
Applicable Laws and Regulations
Data Protection Impact Assessment (DPIA)
List of relevant authorities
2 Measures
Roles & Responsibilities
Organizational Charts
RACI Matrix
8 Measures
Management System Documentations
AI Management System Implementation Plan
AI Management System Process Flowcharts/Maps
AIMS (AI Management System)