Integrations · Communication Tools

Slack

ProofTrail connects to Slack through its API, as access review. Each sync feeds the checks below, and a failing check opens a task for its owner.

Access Control Data

Sync user accounts to ensure access is granted only to authorized personnel. Synced every 24 hours.

  • Rules for who can access critical systems should be configured
  • User access to critical system should be valid
  • User should be identified
  • User should have MFA enabled
  • MFA should be enforced on critical system
  • Periodic review of access to critical systems should be completed
  • Access should be removed for offboarded user
  • User should be identified (for access systems outside the audit scope)
  • User access to critical system should be valid (for access systems outside the audit scope)
  • User should have MFA enabled (for access systems outside the audit scope)
  • MFA should be enforced on critical system (for access systems outside the audit scope)
  • Access should be removed for offboarded user (for access systems outside the audit scope)