DeftTrust

← Controls

IT-04:NET-07

§5 Remote access to production occurs only over an encrypted channel

Status
No evidence
Policy cadence
Quarterly
Last evidence
Next due
Owner
Operations Manager & CTO
TSC
CC6.6CC6.7
Evidence folder
03_Vulnerability_Management
Automatable
Yes
Policy
IT-04
Policy version
v2.0 (2026-03-26) — control IDs assigned by ComplianceHub; no control report exists

Collectors

CollectorRelationshipSamplesWhat it observes
probes.ssh_posture satisfies monthly Proves remote production access is SSH-2 only, with no unencrypted alternative

Evidence satisfying this control

CollectedCollectorResultSourceDigest
No artifact satisfies this control.

Definition history

ChangedFieldFromToSource
2026-09-10 03:32 __created__ quarterly sync_controls

A cadence change re-judges this control's existing evidence against the new interval, so its status can move the moment the change lands. That is why the change is recorded rather than just applied.