Cap - Trust Center
Compliance and Security Portal for Cap.
Compliance overview
An overview of the compliance status of Cap across common frameworks like SOC 2, ISO 27001, and GDPR.
SOC 2 Type 2
Started
25Policies
An up to date list of policies published internally by Cap.
Retention & Secure Disposal
Security & Privacy Awareness Training
Compliance & Regulatory Monitoring
Remote Access & BYOD
Vendor & Third-Party Risk
Risk Management
Background Screening & On/Off-boarding
Information Sharing & Transfer
Policy Management & Exception Handling
Change & Release Management
Vulnerability & Patch Management
Privacy & Data-Subject Rights
Sanctions & Disciplinary
Encryption & Crypto Controls
Logging, Monitoring & Audit
Backup, Business Continuity & Disaster Recovery
Authentication & Password
Access Control & Least Privilege
Information Security & Privacy Governance
Physical Security & Environmental
Incident Response & Breach Notification
Acceptable Use & Workstation Security
Secure Configuration & Hardening
Data Classification & Handling
Secure Software Development Lifecycle
13Controls
An up to date list of controls published internally by Cap.
Contact Information
Device List
Incident Response
Public Policies
2FA
TLS / HTTPS
Code Changes
Secure Devices
Review Policies
Sanitized Inputs
Secure Code
App Availability
Monitoring & Alerting