Controls tested (YTD)
842
Remediation tracker vs Executive
Map Kenya Data Protection Act controls, HIPAA-inspired safeguards contextualised nationally, PEPFAR data use commitments, GDPR cross-border artefacts for innovation sandboxes. Control testing artefacts export for NHIF-ISAC submissions through Reports scheduler. Evidence chains pull from Audit logs, identity posture from IAM, privacy decisions from Consent oversight, and infrastructure proofs from SOC.
Controls tested (YTD)
842
Remediation tracker vs Executive
Open deficiencies
57
DPIAs
38
LinkSOC2-style exceptions
12
IRVendor questionnaires
294
Ops| Control ID | Name | Owner | Next evidence | Shortcuts |
|---|---|---|---|---|
| CMP-ACC-031 | Privileged IAM review quarterly | IAM PMO | 12 Jun | Report |
| CMP-PRT-072 | Pen test remediation | SOC | Late | Budget |
| CMP-DPIA-019 | Genomics expansion | Privacy Secretariat | Workshop | Consent board |
Settings stores policy versioning & mandatory acknowledgment cadence.