Dart Compliance Report
Dart is in compliance with security best practices, has implemented and is monitoring comprehensive controls, and maintains policies to outline its security procedures.
Compliance
Dart is currently in the SOC 2 Type 2 observation period, ensuring the security, availability, and confidentiality of customer data.
Controls
HR
Code of conduct acknowledged by contractors
Performance evaluations conducted
Organization structure documented
Roles and responsibilities specified
Governance
Board oversight briefings conducted
Board expertise developed
Risk and governance executive committee
Company commitments externally communicated
IT
Production inventory maintained
Management roles and responsibilities defined
MDM system utilized
Information security policies and procedures
Incident Management
Support system available
Incident response plan tested
Change Management
Development lifecycle established
Segregation of duties in changes
Production deployment access restricted
Segregation of environment
Vendor
Vendor management program established
Vendor management process
Vendor termination
Policies
Company Handbook
Personnel Security Policy
Change Management Policy
Incident Response Policy
Vendor Management Policy
Board of Directors Charter
Risk and Governance Executive Committee Charter
Business Continuity and Disaster Recovery
Access Control and Termination Policy
Data Classification Policy
Baseline Hardening Policy
Network Security Policy
Information Security Policy
Risk Assessment and Treatment Policy
Information Technology Leadership Committee Charter
