BuildingFloorsPlanEvidenceFrameworks
Harbour & Finch Accountants Ltd

What the survey found, floor by floor

10 failing · 3 partial · 13 passing

FailIDN-012

Access requires a managed device

Nothing requires a managed device, so a stolen password or session token works from the attacker's own computer.

Estate exposed
100%
Affected
0
Place in plan
5
Routes using it
Phishing to account takeover and invoice fraud, MFA bypassed by session-token theft, Personal or commercial data exposed
Cyber Essentials
Not mapped
ISO 27001
A.8.1, A.8.5
Read from
demo:ca_policies
Facts recorded
{
  "policies": []
}
See the fix in the plan