Index
The ten families
Every consumer class sits in one family; the family sets the shape of the finding (a backup without a restore test, a log review outside the daily read, a feed with no fallback).
Security monitoring and log review7 classesBackup, restore and replication6 classesIncident and breach reporting5 classesAccess and identity reviews5 classesRegulatory returns and filings4 classesFinancial reconciliation and close4 classesCustomer-facing feeds and statements4 classesData pipelines, marts and quality checks4 classesVulnerability and patch reporting4 classesBoard and management reporting4 classes