# Surecloud Docs

## Home

- [Welcome to SureCloud](https://surecloud.gitbook.io/surecloud-docs/welcometosurecloud.md): Welcome to your team’s developer platform
- [FAQs](https://surecloud.gitbook.io/surecloud-docs/faqs.md): Quick answers to common SureCloud questions about access, platform use, admin, integrations, and support.

## Documentation

- [Welcome](https://surecloud.gitbook.io/surecloud-docs/documentation/readme.md): Start here to find the right SureCloud documentation for users, admins, designers, and AI features.
- [Getting around SureCloud](https://surecloud.gitbook.io/surecloud-docs/documentation/quick-start/quickstart.md): Navigation, quick access tools and the home page overview.
- [Homepage](https://surecloud.gitbook.io/surecloud-docs/documentation/quick-start/quickstart/homepage.md): Use your homepage to access tasks, recent records, applications, and workflow shortcuts.
- [Tasks](https://surecloud.gitbook.io/surecloud-docs/documentation/quick-start/quickstart/tasks.md): Find, open, and track tasks assigned to you in SureCloud.
- [How to Check SureCloud Service Status](https://surecloud.gitbook.io/surecloud-docs/documentation/quick-start/how-to-check-surecloud-service-status.md): Check the SureCloud status page for live service updates, incidents, and maintenance.
- [How to Provide Feedback on the SureCloud Platform](https://surecloud.gitbook.io/surecloud-docs/documentation/quick-start/how-to-provide-feedback-on-the-surecloud-platform.md): Send product feedback through the Help Centre from anywhere in SureCloud.
- [How to grant a SureCloud support representative access to your tenant](https://surecloud.gitbook.io/surecloud-docs/documentation/quick-start/how-to-grant-a-surecloud-support-representative-access-to-your-tenant.md): Grant a SureCloud support representative access to your tenant for troubleshooting.
- [Tables](https://surecloud.gitbook.io/surecloud-docs/documentation/using-the-platform/tables.md): Search, sort, filter, and manage records in SureCloud tables.
- [Searching Within Tables](https://surecloud.gitbook.io/surecloud-docs/documentation/using-the-platform/tables/searching-within-tables.md): Use the table search bar and column filters to quickly find records in SureCloud.
- [Copy Records from a Table](https://surecloud.gitbook.io/surecloud-docs/documentation/using-the-platform/tables/copy-records-from-a-table.md): Copy an existing table record in SureCloud to reuse data quickly.
- [Bulk Export of Records](https://surecloud.gitbook.io/surecloud-docs/documentation/using-the-platform/tables/bulk-export-of-records.md): Export all or selected records from SureCloud tables to a spreadsheet.
- [Bulk Linked Record Creation](https://surecloud.gitbook.io/surecloud-docs/documentation/using-the-platform/tables/bulk-linked-record-creation.md): Create multiple linked records from selected parent records in SureCloud.
- [Import Records](https://surecloud.gitbook.io/surecloud-docs/documentation/using-the-platform/tables/import-records.md): Import records into SureCloud from a spreadsheet and troubleshoot failed imports.
- [Records](https://surecloud.gitbook.io/surecloud-docs/documentation/using-the-platform/records.md): Create, view, edit, and manage information in SureCloud records.
- [Version History](https://surecloud.gitbook.io/surecloud-docs/documentation/using-the-platform/records/version-history.md): Review record changes, audit log entries, and previous snapshots in SureCloud.
- [Export a Record to Word](https://surecloud.gitbook.io/surecloud-docs/documentation/using-the-platform/records/export-a-record-to-word.md): Export a SureCloud record to a Word document using a mapped template.
- [Confidential Record Access](https://surecloud.gitbook.io/surecloud-docs/documentation/using-the-platform/records/confidential-record-access.md): Restrict access to a SureCloud record by making it private for specific users.
- [Linked Records](https://surecloud.gitbook.io/surecloud-docs/documentation/using-the-platform/records/linked-records.md): Use Links to connect related records - from a Links component on the record page, or from the Links panel in the record toolbar.
- [Questionnaires](https://surecloud.gitbook.io/surecloud-docs/documentation/using-the-platform/records/questionnaires.md): Complete, review, and collaborate on questionnaires in SureCloud records.
- [Review Questionnaires](https://surecloud.gitbook.io/surecloud-docs/documentation/using-the-platform/records/questionnaires/review-questionnaires.md): Review questionnaire answers, update scoring, and link records in SureCloud.
- [Record Progression](https://surecloud.gitbook.io/surecloud-docs/documentation/using-the-platform/records/record-progression.md): Move a record through its workflow using progression buttons in SureCloud.
- [Evidence Collection](https://surecloud.gitbook.io/surecloud-docs/documentation/using-the-platform/records/evidence-collection.md): Set up automated document syncing from cloud storage providers like SharePoint, OneDrive, and Google Drive to your records.
- [File Upload Types](https://surecloud.gitbook.io/surecloud-docs/documentation/using-the-platform/records/file-upload-types.md): View the document, image, media, and archive file types supported in SureCloud uploads.
- [Risk Matrix Settings](https://surecloud.gitbook.io/surecloud-docs/documentation/risk-management/risk-matrix-settings.md): Configure Impact, Likelihood, and Rating Scale settings for risk assessment calculations and visual representation.
- [Dashboards](https://surecloud.gitbook.io/surecloud-docs/documentation/reporting/dashboards.md): Learn how to create, configure, filter, and delete customizable dashboards that display reports to support decision-making.
- [Reports](https://surecloud.gitbook.io/surecloud-docs/documentation/reporting/reports.md): Learn how to create, configure, and manage reports in dashboards with various chart types and filtering options.
- [Choosing the right chart type](https://surecloud.gitbook.io/surecloud-docs/documentation/reporting/reports/choosing-the-right-chart-type.md): Choose the best chart for your report based on the question you want to answer and the shape of your data.
- [Creating Reports on Questionnaire Data](https://surecloud.gitbook.io/surecloud-docs/documentation/reporting/reports/creating-reports-on-questionnaire-data.md): Create detailed reports on questionnaire data from Assessments with breakdown by types, categories, and questions.
- [Risk Heatmap](https://surecloud.gitbook.io/surecloud-docs/documentation/reporting/reports/risk-heatmap.md): Learn how to set up and configure Risk Heatmap charts for visualizing risk assessment data in dashboards.
- [Configuring Colours on Pie, Bar and Line Charts](https://surecloud.gitbook.io/surecloud-docs/documentation/reporting/reports/configuring-colours-on-pie-bar-and-line-charts.md): Learn how to customise chart colours in SureCloud reports to highlight insights and align with branding conventions.
- [Exporting Reports](https://surecloud.gitbook.io/surecloud-docs/documentation/reporting/reports/exporting-reports.md): Export any dashboard report as a PNG image for presentations and sharing.
- [Managing User Access to Records](https://surecloud.gitbook.io/surecloud-docs/documentation/admin/managing-user-access-to-records.md): Learn how roles, groups, and hierarchy context control access to records in SureCloud.
- [Users](https://surecloud.gitbook.io/surecloud-docs/documentation/admin/managing-user-access-to-records/users.md): Learn how to create new user accounts and manage existing users through the Manage Users screen.
- [Groups](https://surecloud.gitbook.io/surecloud-docs/documentation/admin/managing-user-access-to-records/groups.md): Learn how to create, edit, populate, and delete user groups to streamline user administration and role management.
- [Roles](https://surecloud.gitbook.io/surecloud-docs/documentation/admin/managing-user-access-to-records/roles.md): Learn how to create, manage, and delete user roles to control access and permissions within the platform.
- [System Permissions](https://surecloud.gitbook.io/surecloud-docs/documentation/admin/managing-user-access-to-records/roles/system-permissions.md): Learn what system permissions control, which standard roles include them, and how to update them on a role.
- [Hierarchy](https://surecloud.gitbook.io/surecloud-docs/documentation/admin/managing-user-access-to-records/hierarchy.md): Learn how hierarchy controls access and how to create and manage hierarchy items.
- [Hierarchy Access](https://surecloud.gitbook.io/surecloud-docs/documentation/admin/managing-user-access-to-records/hierarchy/hierarchy-access.md): Learn how hierarchy levels, branches, and context control record visibility in SureCloud.
- [Create Hierarchy Items](https://surecloud.gitbook.io/surecloud-docs/documentation/admin/managing-user-access-to-records/hierarchy/create-hierarchy-items.md): Learn how to add hierarchy items and configure inheritance and group access.
- [Manage Hierarchy Items](https://surecloud.gitbook.io/surecloud-docs/documentation/admin/managing-user-access-to-records/hierarchy/manage-hierarchy-items.md): Learn how to edit hierarchy items and manage the groups created for hierarchy access.
- [SSO Support](https://surecloud.gitbook.io/surecloud-docs/documentation/admin/sso-support.md): Check which SSO providers SureCloud supports and what information to send for setup.
- [Custom Email Domains](https://surecloud.gitbook.io/surecloud-docs/documentation/admin/custom-email-domains.md): Configure custom email domains to send SureCloud notifications from your organization's email address for enhanced branding and trust.
- [Setting Up SCIM](https://surecloud.gitbook.io/surecloud-docs/documentation/admin/setting-up-scim.md): Guide for requesting SCIM setup, including required information and the process flow.
- [SCIM with Microsoft Entra ID](https://surecloud.gitbook.io/surecloud-docs/documentation/admin/setting-up-scim/scim-with-microsoft-entra-id.md): Configure Microsoft Entra ID to provision users and group memberships into SureCloud with SCIM.
- [SCIM with Okta](https://surecloud.gitbook.io/surecloud-docs/documentation/admin/setting-up-scim/scim-with-okta.md): Configure Okta to provision users and group memberships into SureCloud with SCIM.
- [Option Lists](https://surecloud.gitbook.io/surecloud-docs/documentation/data-management/option-lists.md): Learn how to create and manage Option Lists for dropdown menus in workflows with single or multi-select functionality.
- [Question Library](https://surecloud.gitbook.io/surecloud-docs/documentation/data-management/question-library.md): Learn how to create and maintain questions that drive assessments and workflow data capture in SureCloud's Question Library.
- [Assessment Types and Question Categories](https://surecloud.gitbook.io/surecloud-docs/documentation/data-management/question-library/assessment-types-and-question-categories.md): Add and manage Assessment Types and Question Categories used in SureCloud questionnaires.
- [Question Scoring](https://surecloud.gitbook.io/surecloud-docs/documentation/data-management/question-library/question-scoring.md): Configure scoring on Question Library questions to assign values automatically based on answers.
- [Conditional Display Logic](https://surecloud.gitbook.io/surecloud-docs/documentation/data-management/question-library/conditional-display-logic.md): Show or hide Question Library questions based on answers to earlier questions.
- [Link Related Records](https://surecloud.gitbook.io/surecloud-docs/documentation/data-management/question-library/link-related-records.md): Link records to a Question Library question so they appear in new questionnaires.
- [Frameworks](https://surecloud.gitbook.io/surecloud-docs/documentation/data-management/frameworks.md): Create and manage frameworks by defining levels, attributes, and items.
- [Getting Started](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/getting-started.md): Get up and running with SureCloud applications and workflows — understand the core concepts and how to create and manage them.
- [Creating Applications](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/getting-started/creating-applications.md): Create and manage applications that group workflows and records in the left-hand navigation.
- [Creating and Managing Workflows](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/getting-started/creating-and-managing-workflows.md): Learn how to create and manage workflows, including properties, attributes, linked entities, views, and notifications.
- [Managing Workflows](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/getting-started/managing-workflows.md): Learn how to access, customize, and configure workflows to automate business tasks and processes through the Workflow Builder interface.
- [Workflow Design](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/workflow-design.md): Configure every aspect of a workflow — from its properties and data fields through to views, linked entities, question sets, and notifications.
- [Properties](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/workflow-design/properties.md): Learn how to configure workflow properties including entity selection, descriptions, and permissions in SureCloud.
- [Attributes](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/workflow-design/attributes.md): Learn how to design and manage workflow attributes in SureCloud, including data fields, types, and permissions.
- [Attribute Types](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/workflow-design/attributes/attribute-types.md)
- [Fixed Attributes](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/workflow-design/attributes/fixed-attributes.md): Learn about the four fixed attributes automatically included in workflows and how to customize them.
- [Adding New Fields](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/workflow-design/attributes/adding-new-fields.md): Learn how to add new custom fields (Attributes) to SureCloud Workflows to capture additional data in your processes.
- [Attribute Guidance](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/workflow-design/attributes/attribute-guidance.md): Learn how to use Short Description Text and Guidance Text to help users complete record attributes effectively.
- [Removing Fields](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/workflow-design/attributes/removing-fields.md): Learn how to safely remove or hide fields (Attributes) from your SureCloud GRC platform workflows.
- [Updating Field Names](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/workflow-design/attributes/updating-field-names.md): Learn how to rename existing attribute labels in SureCloud to update field names across the platform.
- [Linked Entities](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/workflow-design/linked-entities.md): Learn how to establish relationships between different Workflows in SureCloud using Linked Entities to enhance data management and organization.
- [Question Sets](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/workflow-design/question-sets.md): Learn how to create and manage question sets to organize assessment questions and control review permissions.
- [Views](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/workflow-design/views.md): Learn how to design Views in SureCloud workflows to control which attributes, question sets, and linked entities appear at each stage.
- [Creating and Managing Views](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/workflow-design/views/creating-and-managing-views.md): Learn how to create and manage Views to display and interact with record data in SureCloud entities.
- [Adding Sections](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/workflow-design/views/adding-sections.md): Learn how to add, configure, and reorganize sections in the View Builder to organize screen elements into logical groupings.
- [Adding Attributes to a View](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/workflow-design/views/adding-attributes-to-a-view.md): Learn how to add and configure Entity Attributes in views using the Attributes tab and canvas interface.
- [Adding Visual Components to a View](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/workflow-design/views/adding-visual-components-to-a-view.md): Learn how to add Links and Question components to display linked records and questionnaires in a view.
- [Notifications](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/workflow-design/notifications.md): Learn how to create, manage, and configure email notifications within workflow settings to communicate requirements and completed actions to users.
- [Notification Global Settings](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/workflow-design/notifications/notification-global-settings.md): Configure default settings and styles for all notification emails using the Global Email Template.
- [Public Webforms](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/workflow-design/public-webforms.md): Allow external users to submit requests directly into SureCloud without a login.
- [Workflow Logic](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/workflow-logic.md): Control how records move through your workflow — configure states, stages, transitions, automation, and on-create logic.
- [States and Stages](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/workflow-logic/states-and-stages.md): Learn how to configure workflow states and stages to structure your records and control functionality.
- [Transitions, Triggers and Actions](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/workflow-logic/transitions-triggers-and-actions.md): Learn how to create transitions, triggers, and actions to automate workflows and move records between stages.
- [Stage Logic](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/workflow-logic/stage-logic.md): Configure stage logic to trigger automated actions within workflow stages without requiring transitions.
- [Auto-Transitions](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/workflow-logic/auto-transitions.md): Learn how to configure Auto-Transitions in SureCloud workflows to automatically move records based on date conditions.
- [Workflow Permissions](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/workflow-logic/workflow-permissions.md): Configure role permissions for workflow records on a stage-by-stage basis using the Stage Details sidebar.
- [Workflow Actions](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/workflow-logic/workflow-actions.md): Learn which workflow action types are available and when to use them in transitions and stage logic.
- [Advanced](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/advanced.md): In-depth resources for experienced application designers — covering calculations, document templates, and complex configuration patterns.
- [Calculations](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/advanced/calculations.md): Learn how to configure Calculation attributes and write formulas that compute values from your existing record data.
- [AND](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/advanced/calculations/and.md): The AND function evaluates multiple conditions and returns TRUE only if all conditions are met.
- [AVERAGE](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/advanced/calculations/average.md): Calculate the arithmetic mean of a list of numbers using the AVERAGE function.
- [CONCAT](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/advanced/calculations/concat.md): Learn how to use the CONCAT function to combine multiple data types into one continuous text string without delimiters.
- [COUNTD](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/advanced/calculations/countd.md): The COUNTD function returns the number of distinct, non-null values within specified conditions.
- [COUNTU](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/advanced/calculations/countu.md): Returns the number of unique, non-null values within specified conditions, focusing on non-duplicate values that appear only once.
- [COUNT](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/advanced/calculations/count.md): Returns the number of non-null values that satisfy the specified conditions in calculations.
- [DAYS](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/advanced/calculations/days.md): Calculate the number of days between two date values using the DAYS function.
- [FILTER](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/advanced/calculations/filter.md): The FILTER function returns a subset of values from an attribute that meet a specified filter condition.
- [IF](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/advanced/calculations/if.md): The IF function evaluates a condition and returns different values based on whether the condition is TRUE or FALSE.
- [ISBLANK](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/advanced/calculations/isblank.md): The ISBLANK function checks whether a specified value is blank and returns TRUE if empty, otherwise FALSE.
- [LATESTUPDATED](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/advanced/calculations/latestupdated.md): Retrieves the value of a specified attribute from the most recently updated record linked.
- [LATEST](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/advanced/calculations/latest.md): The LATEST function retrieves the value of a specified attribute from the most recently created record linked.
- [MAX](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/advanced/calculations/max.md): Returns the largest value among the specified numbers in calculations.
- [MIN](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/advanced/calculations/min.md): Returns the smallest value among specified numbers in calculations.
- [NOT](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/advanced/calculations/not.md): The NOT function inverts Boolean values, returning FALSE for TRUE conditions and TRUE for FALSE conditions.
- [OR](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/advanced/calculations/or.md): The OR function evaluates multiple conditions and returns TRUE if at least one condition is met, otherwise FALSE.
- [PRODUCT](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/advanced/calculations/product.md): The PRODUCT function multiplies all specified numbers together and returns the result.
- [RISKMATRIX](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/advanced/calculations/riskmatrix.md): Calculate risk ratings using impact and likelihood values with a predefined risk matrix.
- [ROUND](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/advanced/calculations/round.md): The ROUND function rounds a number to the nearest integer or to the nearest specified multiple using half-even rounding.
- [SEARCH](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/advanced/calculations/search.md): Finds the position of a specified substring within a text string, starting from an optional position.
- [SUMIFS](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/advanced/calculations/sumifs.md): The SUMIFS function calculates the sum of a range of numbers that meet multiple criteria.
- [SUM](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/advanced/calculations/sum.md): Calculate the total sum of a list of numbers using the SUM function.
- [Setting Up Word Templates](https://surecloud.gitbook.io/surecloud-docs/documentation/designer-hub/advanced/setting-up-word-templates.md): Learn how to create document templates in Word using XML mappings to automatically generate formatted reports and contracts.
- [Meet Gracie](https://surecloud.gitbook.io/surecloud-docs/documentation/gracie/meet-gracie.md): Gracie is SureCloud's AI assistant — a permission-aware governance, risk, and compliance intelligence engine that works across records, documents, and workflows.
- [Governance & Controls](https://surecloud.gitbook.io/surecloud-docs/documentation/gracie/governance-and-controls.md): Understand the controls that govern Gracie, including approvals, permissions, logging, and credit usage.
- [Chatting with Gracie](https://surecloud.gitbook.io/surecloud-docs/documentation/gracie/chatting-with-gracie.md): Open Gracie from anywhere in the platform and ask questions about your records, dashboards and reports in natural language.
- [What Gracie Can Do](https://surecloud.gitbook.io/surecloud-docs/documentation/gracie/what-gracie-can-do.md): Beyond basic chat, Gracie can consult personas, review documents, analyse records, and automate repeatable GRC work.
- [Personas, Skills and Agents](https://surecloud.gitbook.io/surecloud-docs/documentation/gracie/personas-skills-and-agents.md): Understand how Gracie personas, skills, and agents differ, and when to use each one.
- [Skills](https://surecloud.gitbook.io/surecloud-docs/documentation/gracie/personas-skills-and-agents/skills.md): Manage Gracie skills, understand how they trigger, and build custom skills for chat and AI Agents.
- [Write and Test Custom Skills](https://surecloud.gitbook.io/surecloud-docs/documentation/gracie/personas-skills-and-agents/write-and-test-custom-skills.md): Build tenant skills that trigger reliably, stay grounded, and confirm before writing.
- [Skill and Persona Reference](https://surecloud.gitbook.io/surecloud-docs/documentation/gracie/personas-skills-and-agents/skill-and-persona-reference.md): Browse the current Gracie persona, skill, and knowledge base catalogue by category.
- [Agents](https://surecloud.gitbook.io/surecloud-docs/documentation/gracie/personas-skills-and-agents/agents.md): Define an AI agent once and attach it to workflow stages, transitions, and buttons so Gracie can run automatically.
- [Overview](https://surecloud.gitbook.io/surecloud-docs/documentation/continuous-control-monitoring/overview.md)
- [Get Started](https://surecloud.gitbook.io/surecloud-docs/documentation/continuous-control-monitoring/get-started.md)
- [How CCM Works](https://surecloud.gitbook.io/surecloud-docs/documentation/continuous-control-monitoring/get-started/how-ccm-works.md)
- [Permissions](https://surecloud.gitbook.io/surecloud-docs/documentation/continuous-control-monitoring/get-started/permissions.md)
- [Find And Manage Your Tests](https://surecloud.gitbook.io/surecloud-docs/documentation/continuous-control-monitoring/get-started/find-and-manage-your-tests.md)
- [Build Tests](https://surecloud.gitbook.io/surecloud-docs/documentation/continuous-control-monitoring/build-tests.md)
- [Create A Test](https://surecloud.gitbook.io/surecloud-docs/documentation/continuous-control-monitoring/build-tests/create-a-test.md)
- [Delete A Test](https://surecloud.gitbook.io/surecloud-docs/documentation/continuous-control-monitoring/build-tests/delete-a-test.md)
- [Link A Test To A Control](https://surecloud.gitbook.io/surecloud-docs/documentation/continuous-control-monitoring/build-tests/delete-a-test/link-a-test-to-a-control.md)
- [Set Pass Thresholds](https://surecloud.gitbook.io/surecloud-docs/documentation/continuous-control-monitoring/build-tests/set-pass-thresholds.md)
- [Write Test Logic](https://surecloud.gitbook.io/surecloud-docs/documentation/continuous-control-monitoring/write-test-logic.md)
- [How A Test Is Written](https://surecloud.gitbook.io/surecloud-docs/documentation/continuous-control-monitoring/write-test-logic/how-a-test-is-written.md)
- [Functions](https://surecloud.gitbook.io/surecloud-docs/documentation/continuous-control-monitoring/write-test-logic/functions.md)
- [Keywords And Operators](https://surecloud.gitbook.io/surecloud-docs/documentation/continuous-control-monitoring/write-test-logic/keywords-and-operators.md)
- [Example Tests](https://surecloud.gitbook.io/surecloud-docs/documentation/continuous-control-monitoring/write-test-logic/example-tests.md)
- [Use Gracie](https://surecloud.gitbook.io/surecloud-docs/documentation/continuous-control-monitoring/use-gracie.md)
- [Ask Gracie To Explain A Test](https://surecloud.gitbook.io/surecloud-docs/documentation/continuous-control-monitoring/use-gracie/ask-gracie-to-explain-a-test.md)
- [Build Tests With Gracie](https://surecloud.gitbook.io/surecloud-docs/documentation/continuous-control-monitoring/use-gracie/build-tests-with-gracie.md)
- [Results](https://surecloud.gitbook.io/surecloud-docs/documentation/continuous-control-monitoring/results.md)
- [Read Test Results](https://surecloud.gitbook.io/surecloud-docs/documentation/continuous-control-monitoring/results/read-test-results.md)
- [Troubleshooting](https://surecloud.gitbook.io/surecloud-docs/documentation/continuous-control-monitoring/results/troubleshooting.md)
- [Data](https://surecloud.gitbook.io/surecloud-docs/documentation/continuous-control-monitoring/data.md)
- [Integration Tables](https://surecloud.gitbook.io/surecloud-docs/documentation/continuous-control-monitoring/data/integration-tables.md)
- [Managing Your Trust Center](https://surecloud.gitbook.io/surecloud-docs/documentation/trust-center/managing-your-trust-center.md)

## Integrations

- [Welcome to Integrations](https://surecloud.gitbook.io/surecloud-docs/integrations/readme.md): Learn more about SureCloud's APIs and native Integrations.
- [Getting started guide](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-external-api/getting-started-guide.md)
- [Authentication](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-external-api/getting-started-guide/authentication.md)
- [Pagination](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-external-api/getting-started-guide/pagination.md)
- [Rate and usage guidelines](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-external-api/getting-started-guide/rate-and-usage-guidelines.md)
- [Error handling](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-external-api/getting-started-guide/error-handling.md)
- [Creating A Custom Integration](https://surecloud.gitbook.io/surecloud-docs/integrations/integrations/creating-a-custom-integration.md)
- [BlackKite](https://surecloud.gitbook.io/surecloud-docs/integrations/integrations/blackkite.md): Connect SureCloud to BlackKite to pull third-party cyber risk scores and downloadable reports into your workflows.
- [JIRA](https://surecloud.gitbook.io/surecloud-docs/integrations/integrations/jira.md): Connect SureCloud to Jira to create and update tickets automatically from your workflows.
- [OpenAI](https://surecloud.gitbook.io/surecloud-docs/integrations/integrations/openai.md): Use Enterprise OpenAI in SureCloud to generate questionnaire summaries and document reviews.
- [Slack](https://surecloud.gitbook.io/surecloud-docs/integrations/integrations/slack.md): Connect SureCloud to Slack and send workflow notifications to specific channels using a Slack app and incoming webhooks.
- [File sync integrations](https://surecloud.gitbook.io/surecloud-docs/integrations/integrations/file-sync-integrations.md)
- [SharePoint](https://surecloud.gitbook.io/surecloud-docs/integrations/integrations/file-sync-integrations/sharepoint.md): Sync a selected SharePoint file or folder in SureCloud.
- [OneDrive](https://surecloud.gitbook.io/surecloud-docs/integrations/integrations/file-sync-integrations/onedrive.md): Sync a selected OneDrive file or folder in SureCloud.
- [Push Data Into SureCloud](https://surecloud.gitbook.io/surecloud-docs/integrations/integrations/push-data-into-surecloud.md)
- [Call an API from a Workflow](https://surecloud.gitbook.io/surecloud-docs/integrations/integrations/call-an-api-from-a-workflow.md)
- [Overview](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/overview.md)
- [Controls](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls.md)
- [SC AI 001 AI Governance](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-ai-001-ai-governance.md)
- [SC AI 002 AI Data Management](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-ai-002-ai-data-management.md)
- [SC AI 003 AI Impact Assessments](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-ai-003-ai-impact-assessments.md)
- [SC AI 004 AI System Lifecycle](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-ai-004-ai-system-lifecycle.md)
- [SC AI 005 AI Resource Management](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-ai-005-ai-resource-management.md)
- [SC AI 006 AI Transparency and Communication](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-ai-006-ai-transparency-and-communication.md)
- [SC AI 007 AI Acceptable Use](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-ai-007-ai-acceptable-use.md)
- [SC AI 008 AI Third-Party Management](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-ai-008-ai-third-party-management.md)
- [SC APP 001 Secure Development Lifecycle (SDLC)](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-app-001-secure-development-lifecycle-sdlc.md)
- [SC APP 002 Secure Coding](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-app-002-secure-coding.md)
- [SC APP 003 Security Testing in the Development Lifecycle](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-app-003-security-testing-in-the-development-lifecycle.md)
- [SC APP 004 Manage Open Source Components](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-app-004-manage-open-source-components.md)
- [SC APP 005 Outsourced Development Security](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-app-005-outsourced-development-security.md)
- [SC APP 006 API Security](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-app-006-api-security.md)
- [SC APP 007 Code Reviews](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-app-007-code-reviews.md)
- [SC APP 008 Separation of Development and Production Environments](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-app-008-separation-of-development-and-production-environments.md)
- [SC AST 001 Asset Inventory](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-ast-001-asset-inventory.md)
- [SC AST 002 Asset Classification, Labelling, and Handling](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-ast-002-asset-classification-labelling-and-handling.md)
- [SC AST 003 Asset Maintenance](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-ast-003-asset-maintenance.md)
- [SC AST 004 Secure Disposal of Assets](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-ast-004-secure-disposal-of-assets.md)
- [SC AST 005 Return of Assets Upon Termination](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-ast-005-return-of-assets-upon-termination.md)
- [SC BCP 001 Crisis Management Governance](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-bcp-001-crisis-management-governance.md)
- [SC BCP 002 Backup and Recovery Processes](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-bcp-002-backup-and-recovery-processes.md)
- [SC BCP 003 Redundancy Controls](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-bcp-003-redundancy-controls.md)
- [SC BCP 004 Business Continuity and Disaster Recovery Testing](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-bcp-004-business-continuity-and-disaster-recovery-testing.md)
- [SC CLD 001 Cloud Account Management](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-cld-001-cloud-account-management.md)
- [SC CLD 002 Cloud Identity and Access Management](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-cld-002-cloud-identity-and-access-management.md)
- [SC CLD 003 Cloud Logging and Monitoring](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-cld-003-cloud-logging-and-monitoring.md)
- [SC CLD 004 Cloud Network Security](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-cld-004-cloud-network-security.md)
- [SC CLD 005 Cloud Storage Security](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-cld-005-cloud-storage-security.md)
- [SC CLD 006 Cloud Database Security](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-cld-006-cloud-database-security.md)
- [SC CLD 007 Cloud Key Management](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-cld-007-cloud-key-management.md)
- [SC DAT 001 Data Mapping](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-dat-001-data-mapping.md)
- [SC DAT 002 Data Transfer Methods](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-dat-002-data-transfer-methods.md)
- [SC DAT 003 Data Quality](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-dat-003-data-quality.md)
- [SC DP 001 Data Privacy Management](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-dp-001-data-privacy-management.md)
- [SC DP 002 Privacy by Design](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-dp-002-privacy-by-design.md)
- [SC DP 003 Consent Management](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-dp-003-consent-management.md)
- [SC DP 004 Data Subject Access Rights](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-dp-004-data-subject-access-rights.md)
- [SC DP 005 Data Privacy Impact Assessments (DPIAs)](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-dp-005-data-privacy-impact-assessments-dpias.md)
- [SC DP 006 Privacy Notices and Transparent Processing](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-dp-006-privacy-notices-and-transparent-processing.md)
- [SC DP 007 Privacy Breach Management](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-dp-007-privacy-breach-management.md)
- [SC DP 008 Transfer of Personal Data](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-dp-008-transfer-of-personal-data.md)
- [SC DP 009 Records of Processing Activities (ROPA)](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-dp-009-records-of-processing-activities-ropa.md)
- [SC DS 001 Encryption at Rest](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-ds-001-encryption-at-rest.md)
- [SC DS 002 Encryption in Transit](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-ds-002-encryption-in-transit.md)
- [SC DS 003 Data Loss Prevention](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-ds-003-data-loss-prevention.md)
- [SC DS 004 Cryptographic Key Management](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-ds-004-cryptographic-key-management.md)
- [SC END 001 Configuration Privileges](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-end-001-configuration-privileges.md)
- [SC END 002 Session Timeouts](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-end-002-session-timeouts.md)
- [SC END 003 Anti-Malware](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-end-003-anti-malware.md)
- [SC END 004 Block Unauthorised Applications](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-end-004-block-unauthorised-applications.md)
- [SC END 005 Mobile Device Management (MDM)](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-end-005-mobile-device-management-mdm.md)
- [SC END 006 Endpoint Detection and Response (EDR)](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-end-006-endpoint-detection-and-response-edr.md)
- [SC END 007 Secure Configurations](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-end-007-secure-configurations.md)
- [SC END 008 Endpoint Encryption](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-end-008-endpoint-encryption.md)
- [SC END 009 Removable Media](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-end-009-removable-media.md)
- [SC GRC 001 Executive Sponsorship](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-grc-001-executive-sponsorship.md)
- [SC GRC 002 Governance Framework](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-grc-002-governance-framework.md)
- [SC GRC 003 Organisational Context](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-grc-003-organisational-context.md)
- [SC GRC 004 Cybersecurity Objectives](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-grc-004-cybersecurity-objectives.md)
- [SC GRC 005 IT Risk Management Framework](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-grc-005-it-risk-management-framework.md)
- [SC GRC 006 Risk Treatment](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-grc-006-risk-treatment.md)
- [SC GRC 007 Reporting to Leadership and External Authorities](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-grc-007-reporting-to-leadership-and-external-authorities.md)
- [SC GRC 008 Regulatory, Legal, and Compliance Requirements](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-grc-008-regulatory-legal-and-compliance-requirements.md)
- [SC GRC 009 Roles and Responsibilities](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-grc-009-roles-and-responsibilities.md)
- [SC GRC 010 Independent Control Assessments](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-grc-010-independent-control-assessments.md)
- [SC GRC 011 Continuous Improvements](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-grc-011-continuous-improvements.md)
- [SC GRC 012 Exceptions Management](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-grc-012-exceptions-management.md)
- [SC GRC 013 KPIs and Metrics](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-grc-013-kpis-and-metrics.md)
- [SC GRC 014 Segregation of Duties](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-grc-014-segregation-of-duties.md)
- [SC GRC 015 Knowledge Sharing](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-grc-015-knowledge-sharing.md)
- [SC GRC 016 Cybersecurity in Project Management](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-grc-016-cybersecurity-in-project-management.md)
- [SC GRC 017 Resourcing, Skills, and Competencies](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-grc-017-resourcing-skills-and-competencies.md)
- [SC GRC 018 Critical Assets Are Defined](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-grc-018-critical-assets-are-defined.md)
- [SC GRC 019 Control Framework](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-grc-019-control-framework.md)
- [SC GRC 020 Change Management](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-grc-020-change-management.md)
- [SC GRC 021 Confidential Communication Lines](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-grc-021-confidential-communication-lines.md)
- [SC IAM 001 Joiners, Movers, and Leavers](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-iam-001-joiners-movers-and-leavers.md)
- [SC IAM 002 Identity and Access Management](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-iam-002-identity-and-access-management.md)
- [SC IAM 003 Multi-Factor Authentication (MFA)](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-iam-003-multi-factor-authentication-mfa.md)
- [SC IAM 004 Role-Based Access Control (RBAC)](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-iam-004-role-based-access-control-rbac.md)
- [SC IAM 005 Password Management](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-iam-005-password-management.md)
- [SC IAM 006 User Access Reviews](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-iam-006-user-access-reviews.md)
- [SC IAM 007 Authentication Methods](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-iam-007-authentication-methods.md)
- [SC IAM 008 Privileged Access Management](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-iam-008-privileged-access-management.md)
- [SC IAM 009 Shared and Service Accounts](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-iam-009-shared-and-service-accounts.md)
- [SC IAM 010 Inactive Accounts](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-iam-010-inactive-accounts.md)
- [SC IR 001 Incident Management](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-ir-001-incident-management.md)
- [SC IR 002 Incident Reporting](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-ir-002-incident-reporting.md)
- [SC IR 003 Incident Response Playbooks](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-ir-003-incident-response-playbooks.md)
- [SC IR 004 Incident Communications](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-ir-004-incident-communications.md)
- [SC IR 005 Incident Lessons Learned](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-ir-005-incident-lessons-learned.md)
- [SC IR 006 Incident Root Cause Analysis](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-ir-006-incident-root-cause-analysis.md)
- [SC IR 007 Secure Evidence Handling](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-ir-007-secure-evidence-handling.md)
- [SC IR 008 Recovery Procedures](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-ir-008-recovery-procedures.md)
- [SC LOG 001 Access to Source Code](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-log-001-access-to-source-code.md)
- [SC LOG 002 Logging and Monitoring](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-log-002-logging-and-monitoring.md)
- [SC LOG 003 Logs Are Securely Managed](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-log-003-logs-are-securely-managed.md)
- [SC LOG 004 Security Event Management](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-log-004-security-event-management.md)
- [SC LOG 005 Capacity Management](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-log-005-capacity-management.md)
- [SC LOG 006 Cloud Security Posture Management](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-log-006-cloud-security-posture-management.md)
- [SC NET 001 Network Segmentation](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-net-001-network-segmentation.md)
- [SC NET 002 Firewalls](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-net-002-firewalls.md)
- [SC NET 003 VPN for Secure Remote Access](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-net-003-vpn-for-secure-remote-access.md)
- [SC NET 004 Network Monitoring](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-net-004-network-monitoring.md)
- [SC NET 005 Network Access Control](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-net-005-network-access-control.md)
- [SC NET 006 Web Filtering](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-net-006-web-filtering.md)
- [SC NET 007 Wireless Security Standards](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-net-007-wireless-security-standards.md)
- [SC NET 008 Email Security](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-net-008-email-security.md)
- [SC PER 001 Background Checks](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-per-001-background-checks.md)
- [SC PER 002 Employee Contract Clauses](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-per-002-employee-contract-clauses.md)
- [SC PER 003 Disciplinary Process](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-per-003-disciplinary-process.md)
- [SC PER 004 Remote Working Behaviours](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-per-004-remote-working-behaviours.md)
- [SC PHY 001 Secure Areas](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-phy-001-secure-areas.md)
- [SC PHY 002 Physical Access Controls and Monitoring](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-phy-002-physical-access-controls-and-monitoring.md)
- [SC PHY 003 Environmental Controls](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-phy-003-environmental-controls.md)
- [SC PHY 004 Physical, Environmental, and Utility Hardware](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-phy-004-physical-environmental-and-utility-hardware.md)
- [SC PHY 005 Visitor Management Process](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-phy-005-visitor-management-process.md)
- [SC PHY 006 Clear Desk and Screen Policy](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-phy-006-clear-desk-and-screen-policy.md)
- [SC PHY 007 Perimeter Security Requirements](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-phy-007-perimeter-security-requirements.md)
- [SC POL 001 Policy Attestation](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-pol-001-policy-attestation.md)
- [SC POL 002 Document Review Process](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-pol-002-document-review-process.md)
- [SC POL 003 Acceptable Use Policy (AUP)](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-pol-003-acceptable-use-policy-aup.md)
- [SC POL 004 IT Asset Management Policy](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-pol-004-it-asset-management-policy.md)
- [SC POL 005 Data Backup and Recovery Policy](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-pol-005-data-backup-and-recovery-policy.md)
- [SC POL 006 Business Continuity Plan](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-pol-006-business-continuity-plan.md)
- [SC POL 007 Code of Conduct](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-pol-007-code-of-conduct.md)
- [SC POL 008 Data Classification and Handling Policy](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-pol-008-data-classification-and-handling-policy.md)
- [SC POL 009 Data Protection and Privacy Policy](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-pol-009-data-protection-and-privacy-policy.md)
- [SC POL 010 Data Retention Schedule](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-pol-010-data-retention-schedule.md)
- [SC POL 011 IT Disaster Recovery Plan](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-pol-011-it-disaster-recovery-plan.md)
- [SC POL 012 Cryptography Policy](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-pol-012-cryptography-policy.md)
- [SC POL 013 Cloud Security Policy](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-pol-013-cloud-security-policy.md)
- [SC POL 014 Incident Response Plan](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-pol-014-incident-response-plan.md)
- [SC POL 015 Information Security Policy](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-pol-015-information-security-policy.md)
- [SC POL 016 Logging and Monitoring Policy](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-pol-016-logging-and-monitoring-policy.md)
- [SC POL 017 Physical and Environmental Security Policy](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-pol-017-physical-and-environmental-security-policy.md)
- [SC POL 018 Responsible Disclosure Process](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-pol-018-responsible-disclosure-process.md)
- [SC POL 019 Access Control Policy](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-pol-019-access-control-policy.md)
- [SC POL 020 Third-Party Risk Management Policy](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-pol-020-third-party-risk-management-policy.md)
- [SC POL 021 Vulnerability Management Policy](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-pol-021-vulnerability-management-policy.md)
- [SC POL 022 Network Security Policy](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-pol-022-network-security-policy.md)
- [SC POL 023 Business Impact Assessments](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-pol-023-business-impact-assessments.md)
- [SC POL 024 Operating Procedures](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-pol-024-operating-procedures.md)
- [SC SAT 001 Cybersecurity Awareness Program](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-sat-001-cybersecurity-awareness-program.md)
- [SC SAT 002 Cybersecurity Training](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-sat-002-cybersecurity-training.md)
- [SC SAT 003 Phishing Campaigns](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-sat-003-phishing-campaigns.md)
- [SC SAT 004 Senior Leadership Training and Awareness](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-sat-004-senior-leadership-training-and-awareness.md)
- [SC TPRM 001 Third-Party Risk Management Process](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-tprm-001-third-party-risk-management-process.md)
- [SC TPRM 002 Third-Party Inventory](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-tprm-002-third-party-inventory.md)
- [SC TPRM 003 Third-Party Assessments](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-tprm-003-third-party-assessments.md)
- [SC TPRM 004 Contractual Clauses for Third Parties](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-tprm-004-contractual-clauses-for-third-parties.md)
- [SC TPRM 005 Data Protection Agreements](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-tprm-005-data-protection-agreements.md)
- [SC TPRM 006 Third-Party Incident Notification](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-tprm-006-third-party-incident-notification.md)
- [SC TPRM 007 Third-Party Access](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-tprm-007-third-party-access.md)
- [SC TVM 001 Threat Modelling](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-tvm-001-threat-modelling.md)
- [SC TVM 002 Threat Intelligence](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-tvm-002-threat-intelligence.md)
- [SC TVM 003 Vulnerability Scanning](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-tvm-003-vulnerability-scanning.md)
- [SC TVM 004 Vulnerability Management Process](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-tvm-004-vulnerability-management-process.md)
- [SC TVM 005 Patch Management](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-tvm-005-patch-management.md)
- [SC TVM 006 Adversarial Testing](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/controls/sc-tvm-006-adversarial-testing.md)
- [Control Tests](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests.md)
- [Overview](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/overview.md)
- [TST AI 001 AI Management System Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ai-001-ai-management-system-is-in-place.md)
- [TST AI 002 AI Policy Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ai-002-ai-policy-is-in-place.md)
- [TST AI 003 AI Roles and Responsibilities Are Defined](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ai-003-ai-roles-and-responsibilities-are-defined.md)
- [TST AI 004 AI Objectives Have Been Defined](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ai-004-ai-objectives-have-been-defined.md)
- [TST AI 005 AI Change Management Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ai-005-ai-change-management-is-in-place.md)
- [TST AI 006 AI Risk Management Methodology Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ai-006-ai-risk-management-methodology-is-in-place.md)
- [TST AI 006 AI Risk Management Methodology Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ai-006-ai-risk-management-methodology-is-in-place-1.md)
- [TST AI 007 AI System Impact Assessments Are Performed](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ai-007-ai-system-impact-assessments-are-performed.md)
- [TST AI 008 AI Resources Are Identified and Documented](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ai-008-ai-resources-are-identified-and-documented.md)
- [TST AI 009 AI Competence and Awareness Are In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ai-009-ai-competence-and-awareness-are-in-place.md)
- [TST AI 010 AI Documentation and Transparency Are In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ai-010-ai-documentation-and-transparency-are-in-place.md)
- [TST AI 011 AI Lifecycle Management Process Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ai-011-ai-lifecycle-management-process-is-in-place.md)
- [TST AI 012 AI Data Management Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ai-012-ai-data-management-is-in-place.md)
- [TST AI 013 AI Event Logging Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ai-013-ai-event-logging-is-in-place.md)
- [TST AI 014 AI Incident and External Reporting Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ai-014-ai-incident-and-external-reporting-is-in-place.md)
- [TST AI 015 AI Responsible Use Processes Are In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ai-015-ai-responsible-use-processes-are-in-place.md)
- [TST AI 016 AI Third-Party and Customer Relationships Are Managed](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ai-016-ai-third-party-and-customer-relationships-are-managed.md)
- [TST AI 017 AI Internal Audit and Management Review Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ai-017-ai-internal-audit-and-management-review-is-in-place.md)
- [TST AI 018 AI Continual Improvement and Corrective Action Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ai-018-ai-continual-improvement-and-corrective-action-is-in-place.md)
- [TST AI 019 User-Facing AI Documentation](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ai-019-user-facing-ai-documentation.md)
- [TST APP 001 Secure Development Lifecycle Policy Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-app-001-secure-development-lifecycle-policy-is-in-place.md)
- [TST APP 002 Secure Coding Standards Have Been Defined](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-app-002-secure-coding-standards-have-been-defined.md)
- [TST APP 003 Code Is Scanned for Security Issues and Vulnerabilities](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-app-003-code-is-scanned-for-security-issues-and-vulnerabilities.md)
- [TST APP 004 Software Composition Analysis Is Performed](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-app-004-software-composition-analysis-is-performed.md)
- [TST APP 005 Outsourced Development Is Managed](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-app-005-outsourced-development-is-managed.md)
- [TST APP 006 Critical Vulnerabilities in the Development Pipeline Are Addressed Within SLA](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-app-006-critical-vulnerabilities-in-the-development-pipeline-are-addressed-within-sla.md)
- [TST APP 007 High Vulnerabilities in the Development Pipeline Are Addressed Within SLA](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-app-007-high-vulnerabilities-in-the-development-pipeline-are-addressed-within-sla.md)
- [TST APP 008 Code Reviews Are Performed](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-app-008-code-reviews-are-performed.md)
- [TST APP 009 Baseline Security Architecture Requirements Are Defined](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-app-009-baseline-security-architecture-requirements-are-defined.md)
- [TST APP 010 Development and Production Environments Are Separated](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-app-010-development-and-production-environments-are-separated.md)
- [TST APP 011 Production Data Is Not Used in Test Development Environments](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-app-011-production-data-is-not-used-in-test-development-environments.md)
- [TST APP 012 Approvals Are In Place Prior to Merging Code](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-app-012-approvals-are-in-place-prior-to-merging-code.md)
- [TST APP 013 Access to Source Code Is Restricted](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-app-013-access-to-source-code-is-restricted.md)
- [TST AST 001 Asset Inventories Are In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ast-001-asset-inventories-are-in-place.md)
- [TST AST 002 Assets Are Classified in Line with Policy](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ast-002-assets-are-classified-in-line-with-policy.md)
- [TST AST 003 Assets Are Handled in Line with Policy](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ast-003-assets-are-handled-in-line-with-policy.md)
- [TST AST 004 Asset Acquisition, Development, and Maintenance Processes Are Documented](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ast-004-asset-acquisition-development-and-maintenance-processes-are-documented.md)
- [TST AST 005 Assets Are Securely Disposed](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ast-005-assets-are-securely-disposed.md)
- [TST AST 006 Asset Return Process Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ast-006-asset-return-process-is-in-place.md)
- [TST BCP 001 IT Disaster Recovery Plans Are In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-bcp-001-it-disaster-recovery-plans-are-in-place.md)
- [TST BCP 002 Redundancies Are Identified for Business Continuity Plans](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-bcp-002-redundancies-are-identified-for-business-continuity-plans.md)
- [TST BCP 003 Business Continuity Plans Are Tested](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-bcp-003-business-continuity-plans-are-tested.md)
- [TST BCP 004 An Operational Resilience Strategy Has Been Defined](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-bcp-004-an-operational-resilience-strategy-has-been-defined.md)
- [TST CLD 001 AWS Account Security Contacts Are Registered and Up to Date](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-001-aws-account-security-contacts-are-registered-and-up-to-date.md)
- [TST CLD 002 AWS Activity Is Tracked Across Regions Using CloudTrail](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-002-aws-activity-is-tracked-across-regions-using-cloudtrail.md)
- [TST CLD 003 AWS CloudTrail Logs Are Encrypted at Rest](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-003-aws-cloudtrail-logs-are-encrypted-at-rest.md)
- [TST CLD 004 AWS CloudTrail Log Files Are Validated](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-004-aws-cloudtrail-log-files-are-validated.md)
- [TST CLD 005 AWS S3 CloudTrail Bucket Has Logging In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-005-aws-s3-cloudtrail-bucket-has-logging-in-place.md)
- [TST CLD 006 AWS Config Tracks Resource Changes Across Your Environment](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-006-aws-config-tracks-resource-changes-across-your-environment.md)
- [TST CLD 007 Traffic in Default AWS VPC Security Groups Is Disabled](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-007-traffic-in-default-aws-vpc-security-groups-is-disabled.md)
- [TST CLD 008 AWS VPC Flow Logs Are Enabled](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-008-aws-vpc-flow-logs-are-enabled.md)
- [TST CLD 009 AWS EBS Volumes Are Encrypted by Default](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-009-aws-ebs-volumes-are-encrypted-by-default.md)
- [TST CLD 010 IMDSv2 Is Enabled on AWS EC2 Instances](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-010-imdsv2-is-enabled-on-aws-ec2-instances.md)
- [TST CLD 011 Unrestricted Inbound Access 0.0.0.0/0 to AWS VPC on Ports 22 and 3389 Is Blocked](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-011-unrestricted-inbound-access-0.0.0.0-0-to-aws-vpc-on-ports-22-and-3389-is-blocked.md)
- [TST CLD 012 Public Admin Access to AWS EC2 via Security Groups, e.g., SSH and RDP, Is Blocked](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-012-public-admin-access-to-aws-ec2-via-security-groups-e.g.-ssh-and-rdp-is-blocked.md)
- [TST CLD 013 IPv6 Public Admin Access to AWS EC2 via Security Groups Is Blocked](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-013-ipv6-public-admin-access-to-aws-ec2-via-security-groups-is-blocked.md)
- [TST CLD 014 Data at Rest for AWS Elastic File System Is Encrypted Using AWS KMS](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-014-data-at-rest-for-aws-elastic-file-system-is-encrypted-using-aws-kms.md)
- [TST CLD 015 IAM Policies Are Not Directly Attached to AWS IAM Users](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-015-iam-policies-are-not-directly-attached-to-aws-iam-users.md)
- [TST CLD 016 Regular Rotation of AWS IAM Access Keys Is Enforced Every 90 Days or Less](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-016-regular-rotation-of-aws-iam-access-keys-is-enforced-every-90-days-or-less.md)
- [TST CLD 017 AWS Root Account Does Not Have an Active Access Key](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-017-aws-root-account-does-not-have-an-active-access-key.md)
- [TST CLD 018 MFA Is Required for All AWS IAM Users with Console Access](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-018-mfa-is-required-for-all-aws-iam-users-with-console-access.md)
- [TST CLD 019 Hardware MFA Is Required for the AWS Root Account](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-019-hardware-mfa-is-required-for-the-aws-root-account.md)
- [TST CLD 020 MFA Is Enabled for the AWS Root Account](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-020-mfa-is-enabled-for-the-aws-root-account.md)
- [TST CLD 021 14-Character Minimum Password Is Enabled in the AWS IAM Policy](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-021-14-character-minimum-password-is-enabled-in-the-aws-iam-policy.md)
- [TST CLD 022 Password Reuse Is Prevented for AWS IAM](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-022-password-reuse-is-prevented-for-aws-iam.md)
- [TST CLD 023 A Dedicated AWS IAM Support Role Is Created for Incident Response Coordination](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-023-a-dedicated-aws-iam-support-role-is-created-for-incident-response-coordination.md)
- [TST CLD 024 Unused AWS IAM Credentials Older Than 45 Days Are Removed](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-024-unused-aws-iam-credentials-older-than-45-days-are-removed.md)
- [TST CLD 025 Expired AWS-Managed SSL/TLS Certificates Are Removed from IAM](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-025-expired-aws-managed-ssl-tls-certificates-are-removed-from-iam.md)
- [TST CLD 026 Use of the AWSCloudShellFullAccess Policy Is Restricted to Minimise Privilege](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-026-use-of-the-awscloudshellfullaccess-policy-is-restricted-to-minimise-privilege.md)
- [TST CLD 027 AWS IAM Access Analyzer Is Enabled to Detect Unintended External Access](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-027-aws-iam-access-analyzer-is-enabled-to-detect-unintended-external-access.md)
- [TST CLD 028 Automatic Rotation Is Enabled for AWS KMS Keys](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-028-automatic-rotation-is-enabled-for-aws-kms-keys.md)
- [TST CLD 029 AWS RDS Instances Are Not Publicly Accessible](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-029-aws-rds-instances-are-not-publicly-accessible.md)
- [TST CLD 030 Data at Rest for AWS RDS Instances Is Encrypted Using AWS KMS](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-030-data-at-rest-for-aws-rds-instances-is-encrypted-using-aws-kms.md)
- [TST CLD 031 Automatic Minor Version Upgrades Are Enabled for AWS RDS Databases](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-031-automatic-minor-version-upgrades-are-enabled-for-aws-rds-databases.md)
- [TST CLD 032 All Public Access Settings Are Blocked on AWS S3 General Purpose Buckets](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-032-all-public-access-settings-are-blocked-on-aws-s3-general-purpose-buckets.md)
- [TST CLD 033 SSL Is Required for All Requests to AWS S3 General Purpose Buckets](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-033-ssl-is-required-for-all-requests-to-aws-s3-general-purpose-buckets.md)
- [TST CLD 034 Public Access to AWS S3 General Purpose Buckets Is Prevented](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-034-public-access-to-aws-s3-general-purpose-buckets-is-prevented.md)
- [TST CLD 035 MFA Delete Is Enabled on AWS S3 General Purpose Buckets to Protect Data Removal](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-035-mfa-delete-is-enabled-on-aws-s3-general-purpose-buckets-to-protect-data-removal.md)
- [TST CLD 036 Object-Level Write Operations Are Logged in AWS S3 General Purpose Buckets](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-036-object-level-write-operations-are-logged-in-aws-s3-general-purpose-buckets.md)
- [TST CLD 037 Object-Level Read Operations Are Logged in AWS S3 General Purpose Buckets](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-037-object-level-read-operations-are-logged-in-aws-s3-general-purpose-buckets.md)
- [TST CLD 038 Shared Responsibility Model Is Defined](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-038-shared-responsibility-model-is-defined.md)
- [TST CLD 039 Access to Customer Data Is Strictly Controlled](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-039-access-to-customer-data-is-strictly-controlled.md)
- [TST CLD 040 Cloud Virtual Machine Hardening Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-040-cloud-virtual-machine-hardening-is-in-place.md)
- [TST CLD 041 Cloud Operating Procedures Are Defined](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-cld-041-cloud-operating-procedures-are-defined.md)
- [TST DAT 001 Data Flow Diagrams Are In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dat-001-data-flow-diagrams-are-in-place.md)
- [TST DAT 002 Data Transfer Methods Are Implemented in Line with Data Sensitivity](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dat-002-data-transfer-methods-are-implemented-in-line-with-data-sensitivity.md)
- [TST DAT 003 Internal Control Data Is Assessed for Quality and Accuracy](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dat-003-internal-control-data-is-assessed-for-quality-and-accuracy.md)
- [TST DAT 004 Data Requirements for Controls Are Established](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dat-004-data-requirements-for-controls-are-established.md)
- [TST DAT 005 Processing Inputs for Key Systems Are Defined and Tracked](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dat-005-processing-inputs-for-key-systems-are-defined-and-tracked.md)
- [TST DAT 006 Processing Inputs for Key Systems Are Evaluated](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dat-006-processing-inputs-for-key-systems-are-evaluated.md)
- [TST DAT 007 Processing Specifications Are In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dat-007-processing-specifications-are-in-place.md)
- [TST DAT 008 Processing SLAs Are Specified for Key Systems](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dat-008-processing-slas-are-specified-for-key-systems.md)
- [TST DAT 009 Logging and Alerting Is In Place for Processing Activities](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dat-009-logging-and-alerting-is-in-place-for-processing-activities.md)
- [TST DAT 010 Input Validation Is In Place for Key Systems](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dat-010-input-validation-is-in-place-for-key-systems.md)
- [TST DAT 011 Output Validation Is In Place for Completeness and Accuracy of Data](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dat-011-output-validation-is-in-place-for-completeness-and-accuracy-of-data.md)
- [TST DAT 012 System Records Are Archived](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dat-012-system-records-are-archived.md)
- [TST DAT 013 Functional and Non-Functional Requirements for System Processing Are Identified](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dat-013-functional-and-non-functional-requirements-for-system-processing-are-identified.md)
- [TST DP 001 Data Processing Agreements Are In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dp-001-data-processing-agreements-are-in-place.md)
- [TST DP 002 Joint Controller Arrangements Are In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dp-002-joint-controller-arrangements-are-in-place.md)
- [TST DP 003 Regulatory Authority Representative Has Been Assigned](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dp-003-regulatory-authority-representative-has-been-assigned.md)
- [TST DP 004 Data Protection Officer Is In Place with Defined Roles and Responsibilities](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dp-004-data-protection-officer-is-in-place-with-defined-roles-and-responsibilities.md)
- [TST DP 005 Data Privacy Impact Assessments Are Performed](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dp-005-data-privacy-impact-assessments-are-performed.md)
- [TST DP 006 Records of Processing Activities Have Been Defined](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dp-006-records-of-processing-activities-have-been-defined.md)
- [TST DP 007 Data Protection and Privacy by Design Requirements Have Been Defined](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dp-007-data-protection-and-privacy-by-design-requirements-have-been-defined.md)
- [TST DP 008 Data Masking](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dp-008-data-masking.md)
- [TST DP 009 Consent Management Processes Are In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dp-009-consent-management-processes-are-in-place.md)
- [TST DP 010 Lawful Basis for Processing Is Managed](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dp-010-lawful-basis-for-processing-is-managed.md)
- [TST DP 011 Special Category Data Processing Is Controlled](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dp-011-special-category-data-processing-is-controlled.md)
- [TST DP 012 Processing Without Identification Is Managed](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dp-012-processing-without-identification-is-managed.md)
- [TST DP 013 Data Subject Rights Are Enabled](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dp-013-data-subject-rights-are-enabled.md)
- [TST DP 014 Data Breach Management Process Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dp-014-data-breach-management-process-is-in-place.md)
- [TST DP 015 External Communication Plans for Data Breaches Are In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dp-015-external-communication-plans-for-data-breaches-are-in-place.md)
- [TST DP 016 Data Breach Reporting Plans Are In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dp-016-data-breach-reporting-plans-are-in-place.md)
- [TST DP 017 Personal Data Transfer Mechanisms Are In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dp-017-personal-data-transfer-mechanisms-are-in-place.md)
- [TST DP 018 Employee Privacy Notice Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dp-018-employee-privacy-notice-is-in-place.md)
- [TST DP 019 Public-Facing Privacy Notice Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dp-019-public-facing-privacy-notice-is-in-place.md)
- [TST DP 020 Data Subjects Are Informed of Changes in Data Processing](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-dp-020-data-subjects-are-informed-of-changes-in-data-processing.md)
- [TST DS 001 Data Is Encrypted at Rest](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ds-001-data-is-encrypted-at-rest.md)
- [TST DS 002 Endpoints Are Encrypted](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ds-002-endpoints-are-encrypted.md)
- [TST DS 003 Data Is Encrypted in Transit Using Secure Protocols](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ds-003-data-is-encrypted-in-transit-using-secure-protocols.md)
- [TST DS 004 Data Loss Prevention Controls Are In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ds-004-data-loss-prevention-controls-are-in-place.md)
- [TST DS 005 Cryptographic Keys Are Managed Securely](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ds-005-cryptographic-keys-are-managed-securely.md)
- [TST END 001 Session Timeouts Are In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-end-001-session-timeouts-are-in-place.md)
- [TST END 002 Anti-Malware Solutions Are In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-end-002-anti-malware-solutions-are-in-place.md)
- [TST END 003 Endpoint Alerts Are Addressed Within SLAs](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-end-003-endpoint-alerts-are-addressed-within-slas.md)
- [TST END 004 Application Allowlisting Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-end-004-application-allowlisting-is-in-place.md)
- [TST END 005 Mobile Device Management Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-end-005-mobile-device-management-is-in-place.md)
- [TST END 006 Secure Configurations Are Documented and Managed](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-end-006-secure-configurations-are-documented-and-managed.md)
- [TST END 007 Deviations from Secure Configurations Are Identified and Managed](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-end-007-deviations-from-secure-configurations-are-identified-and-managed.md)
- [TST END 008 Hardened Images Are Retained](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-end-008-hardened-images-are-retained.md)
- [TST END 009 Removable Media Is Managed](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-end-009-removable-media-is-managed.md)
- [TST GRC 001 Executive Sponsor Is Appointed](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-001-executive-sponsor-is-appointed.md)
- [TST GRC 002 Tone from the Top Is Communicated](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-002-tone-from-the-top-is-communicated.md)
- [TST GRC 003 Leadership and the Board of Directors Provide Independent Oversight](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-003-leadership-and-the-board-of-directors-provide-independent-oversight.md)
- [TST GRC 004 IT GRC Governance Framework Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-004-it-grc-governance-framework-is-in-place.md)
- [TST GRC 005 Policies and Processes Framework Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-005-policies-and-processes-framework-is-in-place.md)
- [TST GRC 006 Information Security Management System Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-006-information-security-management-system-is-in-place.md)
- [TST GRC 007 Stakeholder Issues and Needs Are Defined](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-007-stakeholder-issues-and-needs-are-defined.md)
- [TST GRC 008 Statement of Applicability Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-008-statement-of-applicability-is-in-place.md)
- [TST GRC 009 Cybersecurity Objectives Have Been Defined](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-009-cybersecurity-objectives-have-been-defined.md)
- [TST GRC 010 Risk Management Methodology Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-010-risk-management-methodology-is-in-place.md)
- [TST GRC 011 Risk Assessments and Treatment Are Conducted](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-011-risk-assessments-and-treatment-are-conducted.md)
- [TST GRC 012 Possibility of Fraud Is Considered When Assessing Risk](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-012-possibility-of-fraud-is-considered-when-assessing-risk.md)
- [TST GRC 013 Leadership Reporting Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-013-leadership-reporting-is-in-place.md)
- [TST GRC 014 External Reporting Obligations Are Aligned to Applicable Standards](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-014-external-reporting-obligations-are-aligned-to-applicable-standards.md)
- [TST GRC 015 Findings and Improvement Opportunities Are Reported](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-015-findings-and-improvement-opportunities-are-reported.md)
- [TST GRC 016 Regulatory Requirements Have Been Determined](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-016-regulatory-requirements-have-been-determined.md)
- [TST GRC 017 Roles and Responsibilities Are Defined](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-017-roles-and-responsibilities-are-defined.md)
- [TST GRC 018 Key Person Dependencies Are Identified](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-018-key-person-dependencies-are-identified.md)
- [TST GRC 019 Job Descriptions](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-019-job-descriptions.md)
- [TST GRC 020 Internal Audits Are Planned and Conducted](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-020-internal-audits-are-planned-and-conducted.md)
- [TST GRC 021 Independent Control Assessments Are Performed](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-021-independent-control-assessments-are-performed.md)
- [TST GRC 022 Exceptions Management Process Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-022-exceptions-management-process-is-in-place.md)
- [TST GRC 023 KPIs and Metrics Are Tracked and Reported](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-023-kpis-and-metrics-are-tracked-and-reported.md)
- [TST GRC 024 Segregation of Duties Is Defined](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-024-segregation-of-duties-is-defined.md)
- [TST GRC 025 External Knowledge Sharing Is Performed](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-025-external-knowledge-sharing-is-performed.md)
- [TST GRC 026 Cybersecurity Is Considered in Project Management](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-026-cybersecurity-is-considered-in-project-management.md)
- [TST GRC 027 Skills, Competencies, and Resources Are Identified](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-027-skills-competencies-and-resources-are-identified.md)
- [TST GRC 028 Internal Controls Have Been Identified](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-028-internal-controls-have-been-identified.md)
- [TST GRC 029 Confidential Communication Lines](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-grc-029-confidential-communication-lines.md)
- [TST IAM 001 Joiners, Movers, and Leavers Process Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-iam-001-joiners-movers-and-leavers-process-is-in-place.md)
- [TST IAM 002 User Account Management Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-iam-002-user-account-management-is-in-place.md)
- [TST IAM 003 Identity Management Processes Are In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-iam-003-identity-management-processes-are-in-place.md)
- [TST IAM 004 MFA Is In Place for Remote Access](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-iam-004-mfa-is-in-place-for-remote-access.md)
- [TST IAM 005 MFA Is In Place for Privileged Accounts](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-iam-005-mfa-is-in-place-for-privileged-accounts.md)
- [TST IAM 006 MFA Is In Place for Standard Users](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-iam-006-mfa-is-in-place-for-standard-users.md)
- [TST IAM 007 Role-Based Access Control Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-iam-007-role-based-access-control-is-in-place.md)
- [TST IAM 008 Users Do Not Have Excessive Privileges](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-iam-008-users-do-not-have-excessive-privileges.md)
- [TST IAM 009 User Roles Are Not Directly Assigned to Users](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-iam-009-user-roles-are-not-directly-assigned-to-users.md)
- [TST IAM 010 Password Management Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-iam-010-password-management-is-in-place.md)
- [TST IAM 011 User Account Reviews Are Conducted](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-iam-011-user-account-reviews-are-conducted.md)
- [TST IAM 012 Default Passwords Are Not Used](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-iam-012-default-passwords-are-not-used.md)
- [TST IAM 013 Emergency Accounts Are Removed When No Longer Necessary](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-iam-013-emergency-accounts-are-removed-when-no-longer-necessary.md)
- [TST IAM 014 Secure Authentication Management Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-iam-014-secure-authentication-management-is-in-place.md)
- [TST IAM 015 Privileged Access Management Process Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-iam-015-privileged-access-management-process-is-in-place.md)
- [TST IAM 016 High-Risk Accounts Are Inventoried](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-iam-016-high-risk-accounts-are-inventoried.md)
- [TST IAM 017 Shared and Service Accounts Are Identified](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-iam-017-shared-and-service-accounts-are-identified.md)
- [TST IAM 018 Inactive User Accounts Are Disabled](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-iam-018-inactive-user-accounts-are-disabled.md)
- [TST IAM 019 Access to Privileged Utility Programs Is Managed and Restricted](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-iam-019-access-to-privileged-utility-programs-is-managed-and-restricted.md)
- [TST IR 001 Incidents Are Logged and Triaged](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ir-001-incidents-are-logged-and-triaged.md)
- [TST IR 002 Third-Party Dependencies Are Identified for Incident Response Plans](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ir-002-third-party-dependencies-are-identified-for-incident-response-plans.md)
- [TST IR 003 Incident Reporting Process Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ir-003-incident-reporting-process-is-in-place.md)
- [TST IR 004 Incident Response Playbooks Are Documented and Tested](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ir-004-incident-response-playbooks-are-documented-and-tested.md)
- [TST IR 005 Lessons Learned Are Documented and Incorporated into Process Improvements](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ir-005-lessons-learned-are-documented-and-incorporated-into-process-improvements.md)
- [TST IR 006 Root Cause Analysis Is Performed on Security Incidents and Events](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ir-006-root-cause-analysis-is-performed-on-security-incidents-and-events.md)
- [TST IR 007 Backups and Recovery Processes Are Managed and Tested](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-ir-007-backups-and-recovery-processes-are-managed-and-tested.md)
- [TST LOG 001 Logging and Monitoring Is Conducted on Critical Systems](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-log-001-logging-and-monitoring-is-conducted-on-critical-systems.md)
- [TST LOG 002 Logs Are Securely Managed](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-log-002-logs-are-securely-managed.md)
- [TST LOG 003 Log Validation Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-log-003-log-validation-is-in-place.md)
- [TST LOG 004 Log Timestamps Are Synchronised](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-log-004-log-timestamps-are-synchronised.md)
- [TST LOG 005 Monitoring Alerts Are Configured](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-log-005-monitoring-alerts-are-configured.md)
- [TST LOG 006 Capacity Is Monitored Across Key Systems](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-log-006-capacity-is-monitored-across-key-systems.md)
- [TST LOG 007 Cloud Infrastructure Logging Is Enabled](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-log-007-cloud-infrastructure-logging-is-enabled.md)
- [TST NET 001 Network Security Requirements Are In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-net-001-network-security-requirements-are-in-place.md)
- [TST NET 002 Network Infrastructure Is Documented and Secured](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-net-002-network-infrastructure-is-documented-and-secured.md)
- [TST NET 003 Firewalls Are In Place and Configured Securely](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-net-003-firewalls-are-in-place-and-configured-securely.md)
- [TST NET 004 Network Traffic Is Logged](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-net-004-network-traffic-is-logged.md)
- [TST NET 005 Intrusion Detection and Prevention Tools Are In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-net-005-intrusion-detection-and-prevention-tools-are-in-place.md)
- [TST NET 006 Network Traffic, Inbound and Outbound, Is Controlled](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-net-006-network-traffic-inbound-and-outbound-is-controlled.md)
- [TST NET 007 Valid Certificates Are Used](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-net-007-valid-certificates-are-used.md)
- [TST NET 008 Web Filtering Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-net-008-web-filtering-is-in-place.md)
- [TST NET 009 Email Security Controls Are In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-net-009-email-security-controls-are-in-place.md)
- [TST PER 001 Background Checks Are Performed](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-per-001-background-checks-are-performed.md)
- [TST PER 002 Personnel Security Policy Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-per-002-personnel-security-policy-is-in-place.md)
- [TST PER 003 Employee Contracts Consider Cybersecurity and Confidentiality](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-per-003-employee-contracts-consider-cybersecurity-and-confidentiality.md)
- [TST PER 004 Temporary Staff and Contractor Contracts Consider Cybersecurity and Confidentiality](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-per-004-temporary-staff-and-contractor-contracts-consider-cybersecurity-and-confidentiality.md)
- [TST PER 005 Disciplinary Process Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-per-005-disciplinary-process-is-in-place.md)
- [TST PER 006 Remote Working Policy Is In Place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-per-006-remote-working-policy-is-in-place.md)
- [TST PHY 001 secure areas are securely managed](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-phy-001-secure-areas-are-securely-managed.md)
- [TST PHY 002 physical access is controlled](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-phy-002-physical-access-is-controlled.md)
- [TST PHY 003 environmental security controls are in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-phy-003-environmental-security-controls-are-in-place.md)
- [TST PHY 004 hardware assets are protected from tampering](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-phy-004-hardware-assets-are-protected-from-tampering.md)
- [TST PHY 005 visitor management process is in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-phy-005-visitor-management-process-is-in-place.md)
- [TST PHY 006 clear desk and screen policy is in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-phy-006-clear-desk-and-screen-policy-is-in-place.md)
- [TST PHY 007 perimeter security is managed](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-phy-007-perimeter-security-is-managed.md)
- [TST POL 001 change management process is in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-pol-001-change-management-process-is-in-place.md)
- [TST POL 002 policy attestation is in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-pol-002-policy-attestation-is-in-place.md)
- [TST POL 003 documentation review](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-pol-003-documentation-review.md)
- [TST POL 004 acceptable use policy is in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-pol-004-acceptable-use-policy-is-in-place.md)
- [TST POL 005 it asset management policy is in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-pol-005-it-asset-management-policy-is-in-place.md)
- [TST POL 006 data backup and recovery policy is in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-pol-006-data-backup-and-recovery-policy-is-in-place.md)
- [TST POL 007 business continuity plans are in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-pol-007-business-continuity-plans-are-in-place.md)
- [TST POL 008 cybersecurity insurance is in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-pol-008-cybersecurity-insurance-is-in-place.md)
- [TST POL 009 code of conduct is in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-pol-009-code-of-conduct-is-in-place.md)
- [TST POL 010 data classification and handling policy is in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-pol-010-data-classification-and-handling-policy-is-in-place.md)
- [TST POL 011 data protection privacy policy is in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-pol-011-data-protection-privacy-policy-is-in-place.md)
- [TST POL 012 data retention schedule is in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-pol-012-data-retention-schedule-is-in-place.md)
- [TST POL 013 cryptography policy is in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-pol-013-cryptography-policy-is-in-place.md)
- [TST POL 014 cloud security policy is in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-pol-014-cloud-security-policy-is-in-place.md)
- [TST POL 015 incident response plan is in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-pol-015-incident-response-plan-is-in-place.md)
- [TST POL 016 information security policy is in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-pol-016-information-security-policy-is-in-place.md)
- [TST POL 017 logging and monitoring policy is in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-pol-017-logging-and-monitoring-policy-is-in-place.md)
- [TST POL 018 physical and environmental security policy is in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-pol-018-physical-and-environmental-security-policy-is-in-place.md)
- [TST POL 019 responsible disclosure policy is in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-pol-019-responsible-disclosure-policy-is-in-place.md)
- [TST POL 020 access control policy is in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-pol-020-access-control-policy-is-in-place.md)
- [TST POL 021 third party risk management policy is in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-pol-021-third-party-risk-management-policy-is-in-place.md)
- [TST POL 022 vulnerability management policy is in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-pol-022-vulnerability-management-policy-is-in-place.md)
- [TST POL 023 network security policy is in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-pol-023-network-security-policy-is-in-place.md)
- [TST POL 024 business impact assessments are in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-pol-024-business-impact-assessments-are-in-place.md)
- [TST POL 025 operating procedures and contingencies are in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-pol-025-operating-procedures-and-contingencies-are-in-place.md)
- [TST SAT 001 awareness program is in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-sat-001-awareness-program-is-in-place.md)
- [TST SAT 002 phishing campaigns are conducted](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-sat-002-phishing-campaigns-are-conducted.md)
- [TST SAT 003 training is provided to all staff](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-sat-003-training-is-provided-to-all-staff.md)
- [TST SAT 004 tailored training is provided for high risk roles](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-sat-004-tailored-training-is-provided-for-high-risk-roles.md)
- [TST TPRM 001 third parties have been risk assessed](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-tprm-001-third-parties-have-been-risk-assessed.md)
- [TST TPRM 002 third party onboarding and offboarding process is in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-tprm-002-third-party-onboarding-and-offboarding-process-is-in-place.md)
- [TST TPRM 003 third parties have been inventoried](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-tprm-003-third-parties-have-been-inventoried.md)
- [TST TPRM 004 roles and responsibilities for third party risk management are defined](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-tprm-004-roles-and-responsibilities-for-third-party-risk-management-are-defined.md)
- [TST TPRM 005 third party due diligence is performed](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-tprm-005-third-party-due-diligence-is-performed.md)
- [TST TPRM 006 standard clauses are in place for third party contracts](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-tprm-006-standard-clauses-are-in-place-for-third-party-contracts.md)
- [TST TPRM 007 third party slas are in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-tprm-007-third-party-slas-are-in-place.md)
- [TST TPRM 008 third party incidents are managed and tracked](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-tprm-008-third-party-incidents-are-managed-and-tracked.md)
- [TST TPRM 009 third party access is managed and tracked](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-tprm-009-third-party-access-is-managed-and-tracked.md)
- [TST TVM 001 threat management process is in place](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-tvm-001-threat-management-process-is-in-place.md)
- [TST TVM 002 threat modelling is performed](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-tvm-002-threat-modelling-is-performed.md)
- [TST TVM 003 vulnerability scanning is performed](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-tvm-003-vulnerability-scanning-is-performed.md)
- [TST TVM 004 critical vulnerabilities are addressed within sla](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-tvm-004-critical-vulnerabilities-are-addressed-within-sla.md)
- [TST TVM 005 high vulnerabilities are addresed within sla](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-tvm-005-high-vulnerabilities-are-addresed-within-sla.md)
- [TST TVM 006 patches are applied to key systems](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-tvm-006-patches-are-applied-to-key-systems.md)
- [TST TVM 007 penetration testing has been conducted](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-tvm-007-penetration-testing-has-been-conducted.md)
- [TST TVM 008 red teaming is performed](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/tst-tvm-008-red-teaming-is-performed.md)
- [Creating a CCM test](https://surecloud.gitbook.io/surecloud-docs/integrations/surecloud-control-framework/control-tests/creating-a-ccm-test.md)
- [1password business](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/1password-business.md)
- [Abnormal security](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/abnormal-security.md)
- [Absorb lms](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/absorb-lms.md)
- [Asana](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/asana.md)
- [Atlassian access](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/atlassian-access.md)
- [Auth0](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/auth0.md)
- [AWS](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/aws.md)
- [cloudtrail](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/aws/cloudtrail.md)
- [cloudwatch](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/aws/cloudwatch.md)
- [config](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/aws/config.md)
- [ec2 vpc](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/aws/ec2-vpc.md)
- [guardduty](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/aws/guardduty.md)
- [iam](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/aws/iam.md)
- [kms](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/aws/kms.md)
- [rds](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/aws/rds.md)
- [s3](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/aws/s3.md)
- [security hub](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/aws/security-hub.md)
- [Azure](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/azure.md)
- [azure blob storage](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/azure/azure-blob-storage.md)
- [azure key vault](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/azure/azure-key-vault.md)
- [azure monitor and activity log](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/azure/azure-monitor-and-activity-log.md)
- [azure networking](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/azure/azure-networking.md)
- [azure policy](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/azure/azure-policy.md)
- [azure sql database](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/azure/azure-sql-database.md)
- [azure virtual machines](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/azure/azure-virtual-machines.md)
- [microsoft defender for cloud](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/azure/microsoft-defender-for-cloud.md)
- [microsoft entra id](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/azure/microsoft-entra-id.md)
- [Microsoft sentinel](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/azure/microsoft-sentinel.md)
- [Azure devops](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/azure-devops.md)
- [Bamboohr](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/bamboohr.md)
- [Beyondtrust](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/beyondtrust.md)
- [Bitbucket](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/bitbucket.md)
- [Bitsight](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/bitsight.md)
- [Box](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/box.md)
- [Braintree](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/braintree.md)
- [Carbon black](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/carbon-black.md)
- [Checkmarx](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/checkmarx.md)
- [Checkr](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/checkr.md)
- [Circleci](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/circleci.md)
- [Cisco meraki](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/cisco-meraki.md)
- [Cloudflare](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/cloudflare.md)
- [Confluence](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/confluence.md)
- [Cortex xdr](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/cortex-xdr.md)
- [Cyberark](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/cyberark.md)
- [Datadog](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/datadog.md)
- [Delinea](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/delinea.md)
- [Digitalocean](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/digitalocean.md)
- [Dropbox](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/dropbox.md)
- [Duo security](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/duo-security.md)
- [Elastic](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/elastic.md)
- [Github](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/github.md)
- [Gitlab](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/gitlab.md)
- [Google Cloud](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/google-cloud.md)
- [cloud audit logs](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/google-cloud/cloud-audit-logs.md)
- [cloud key management service](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/google-cloud/cloud-key-management-service.md)
- [cloud sql](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/google-cloud/cloud-sql.md)
- [cloud storage](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/google-cloud/cloud-storage.md)
- [compute engine](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/google-cloud/compute-engine.md)
- [Google chronicle](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/google-cloud/google-chronicle.md)
- [google kubernetes engine](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/google-cloud/google-kubernetes-engine.md)
- [google workspace audit logs](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/google-cloud/google-workspace-audit-logs.md)
- [identity and access management](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/google-cloud/identity-and-access-management.md)
- [security command center](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/google-cloud/security-command-center.md)
- [Google workspace](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/google-workspace.md)
- [google directory](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/google-workspace/google-directory.md)
- [google drive](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/google-workspace/google-drive.md)
- [Gusto](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/gusto.md)
- [Hashicorp vault](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/hashicorp-vault.md)
- [Heroku](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/heroku.md)
- [Hubspot](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/hubspot.md)
- [Jamf](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/jamf.md)
- [Jenkins](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/jenkins.md)
- [Kandji](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/kandji.md)
- [Knowbe4](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/knowbe4.md)
- [Kolide](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/kolide.md)
- [Kubernetes](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/kubernetes.md)
- [Lacework](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/lacework.md)
- [Lastpass enterprise](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/lastpass-enterprise.md)
- [Lattice](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/lattice.md)
- [Lever](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/lever.md)
- [Linear](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/linear.md)
- [Microsoft Intune](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/microsoft-intune.md)
- [Mimecast](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/mimecast.md)
- [Monday.com](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/monday.com.md)
- [Namely](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/namely.md)
- [Notion](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/notion.md)
- [Okta](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/okta.md)
- [Onelogin](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/onelogin.md)
- [Orca security](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/orca-security.md)
- [Pagerduty](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/pagerduty.md)
- [Personio](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/personio.md)
- [Ping identity](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/ping-identity.md)
- [Proofpoint](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/proofpoint.md)
- [Rapid7 insightvm](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/rapid7-insightvm.md)
- [Rippling](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/rippling.md)
- [Salesforce](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/salesforce.md)
- [Securityscorecard](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/securityscorecard.md)
- [Sentinelone](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/sentinelone.md)
- [Servicenow](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/servicenow.md)
- [Snyk](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/snyk.md)
- [Sonarqube](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/sonarqube.md)
- [Sophos](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/sophos.md)
- [Splunk](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/splunk.md)
- [Tenable](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/tenable.md)
- [Terraform cloud](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/terraform-cloud.md)
- [Torq](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/torq.md)
- [Trello](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/trello.md)
- [Twilio sendgrid](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/twilio-sendgrid.md)
- [Vmware carbon black](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/vmware-carbon-black.md)
- [Whistic](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/whistic.md)
- [Wiz](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/wiz.md)
- [Workday](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/workday.md)
- [Zendesk](https://surecloud.gitbook.io/surecloud-docs/integrations/ccm-and-evidence-collection-integrations/zendesk.md)

## Product Updates

- [Product Updates](https://surecloud.gitbook.io/surecloud-docs/product-updates/readme.md): New updates and improvements
- [Product Roadmap](https://surecloud.gitbook.io/surecloud-docs/product-updates/product-roadmap.md): Track planned, in-progress, and released SureCloud features.