DeftTrust

← Controls

IT-04:NET-05

§10 System and network hardening standards maintained and reviewed annually

Status
No evidence
Policy cadence
Annual
Last evidence
Next due
Owner
Operations Manager & CTO
TSC
CC6.6
Evidence folder
03_Vulnerability_Management
Automatable
Yes
Policy
IT-04
Policy version
v2.0 (2026-03-26) — control IDs assigned by ComplianceHub; no control report exists

Collectors

CollectorRelationshipSamplesWhat it observes
probes.http_posture supports monthly HTTPS redirect, HSTS and security headers for every public domain
Supporting evidence only. The collectors above produce material relevant to this control without discharging it, so the control stays overdue. Related evidence must never make a control read as current — the gap would then be invisible.

Evidence satisfying this control

CollectedCollectorResultSourceDigest
No artifact satisfies this control.