Auditor export pack

Meridian Pay (synthetic demo) · Cyber Trust mark self-assessment checklist v202504 · CSA-CTM-self-assessment-v202504
Export v1 · generated 2026-06-04 · crosswalk ctm-ss712-2025-placeholder.v1
ctm-assessor-intake-v1 · tier promoter
⤓ Download JSON
Readiness snapshot prepared for accredited-assessor review — not a certification. The Cyber Trust mark is issued by an accredited assessor. Synthetic demo data only.
Workbookcyber-trust-self-assessment-v202504.xlsx · v202504d57a7774a0c4a412
8%
weighted readiness · 5 met · 2 partial · 68 missing · 0 signed evidence pack(s) · 0 parsed artifact(s) · 0 accepted review(s)

Certification-body intake assumptions

Controls

ControlSourceStateEvidence postureAssessor noteCross-framework
B.1.3
Understanding the importance of cybersecurity
CS Preparedness Questionnaire row 7
manual task
READY
met
1 fresh / 0 stale
0 accepted · no parsed artifacts
Pre-audit ready: control has fresh evidence and has been marked ready.
B.10.1
Cybersecurity measures in Cyber Essentials
CS Preparedness Questionnaire row 102
soc evidence
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.10.2
Cybersecurity measures in Cyber Essentials
CS Preparedness Questionnaire row 103
soc evidence
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.10.3
Using automated backup
CS Preparedness Questionnaire row 104
soc evidence
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.10.4
Establishing backup plans
CS Preparedness Questionnaire row 105
soc evidence
READY
met
1 fresh / 0 stale
0 accepted · no parsed artifacts
Pre-audit ready: control has fresh evidence and has been marked ready.
B.10.5
Use of technologh solutions for data backup and recovery
CS Preparedness Questionnaire row 106
soc evidence
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.11.3
Policies and procedures on BYOD
CS Preparedness Questionnaire row 115
manual task
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.12.1
Cybersecurity measures in Cyber Essentials
CS Preparedness Questionnaire row 120
connector check
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.12.2
Cybersecurity measures in Cyber Essentials
CS Preparedness Questionnaire row 121
connector check
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.12.3
Performing monitoring on updates and patches
CS Preparedness Questionnaire row 122
soc evidence
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.12.4
Implementing process for the application of secure configuration
CS Preparedness Questionnaire row 123
connector check
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.12.5
Implementing log management process
CS Preparedness Questionnaire row 124
soc evidence
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.12.6
Implementing patch management process
CS Preparedness Questionnaire row 125
connector check
READY
met
1 fresh / 0 stale
0 accepted · no parsed artifacts
Pre-audit ready: control has fresh evidence and has been marked ready.
B.13.1
Cybersecurity measures in Cyber Essentials
CS Preparedness Questionnaire row 134
soc evidence
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.13.2
Cybersecurity measures in Cyber Essentials
CS Preparedness Questionnaire row 135
soc evidence
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.13.3
Selection of anti-virus and/or anti-malware solution
CS Preparedness Questionnaire row 136
soc evidence
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.13.4
Implementing web filtering
CS Preparedness Questionnaire row 137
soc evidence
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.13.5
Virus and/or malware isolation
CS Preparedness Questionnaire row 138
soc evidence
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.13.6
Isolation of codes or applications
CS Preparedness Questionnaire row 139
soc evidence
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.14.3
Establishing secure SDLC guidelines and requirements
CS Preparedness Questionnaire row 147
connector check
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.15.1
Cybersecurity measures in Cyber Essentials
CS Preparedness Questionnaire row 152
connector check
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.15.2
Cybersecurity measures in Cyber Essentials
CS Preparedness Questionnaire row 153
connector check
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.15.3
Role matrix review
CS Preparedness Questionnaire row 154
connector check
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.15.4
Account access and role matrix review follow-up process
CS Preparedness Questionnaire row 155
connector check
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.15.5
Principles of least privilege and segregation of duties
CS Preparedness Questionnaire row 156
connector check
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.15.6
Secure logon policy and procedure
CS Preparedness Questionnaire row 157
connector check
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.17.3
Service level Agreement
CS Preparedness Questionnaire row 178
manual task
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.18.3
Establishing vulnerability assessment plan
CS Preparedness Questionnaire row 186
connector check
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.18.4
Implementing regular vulnerability assessment
CS Preparedness Questionnaire row 187
connector check
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.19.2
Establishing detective control
CS Preparedness Questionnaire row 197
manual task
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.19.3
Protection against internal and external threats
CS Preparedness Questionnaire row 198
manual task
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.19.4
Implementing perimeter security
CS Preparedness Questionnaire row 199
manual task
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.19.5
Implementing visitor authorisation
CS Preparedness Questionnaire row 200
manual task
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.19.6
Monitoring physical premise
CS Preparedness Questionnaire row 201
manual task
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.19.7
Establishing physical media handling process
CS Preparedness Questionnaire row 202
manual task
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.2.3
Communicating cybersecurity guidance and/or requirements to employees regularly
CS Preparedness Questionnaire row 16
manual task
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.20.2
Implementing access control
CS Preparedness Questionnaire row 210
connector check
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.20.3
Implementing stateful firewall
CS Preparedness Questionnaire row 211
connector check
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.20.4
Network security review
CS Preparedness Questionnaire row 212
connector check
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.20.5
Implementing network security
CS Preparedness Questionnaire row 213
connector check
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.20.6
Implementing network segmentation
CS Preparedness Questionnaire row 214
soc evidence
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.21.1
Cybersecurity measures in Cyber Essentials
CS Preparedness Questionnaire row 221
soc evidence
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.21.2
Cybersecurity measures in Cyber Essentials
CS Preparedness Questionnaire row 222
soc evidence
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.21.3
Verifying contactability of personnel involved in incident response
CS Preparedness Questionnaire row 223
soc evidence
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.21.4
Performing cyber exercises
CS Preparedness Questionnaire row 224
soc evidence
PENDING
partial
1 fresh / 0 stale
0 accepted · no parsed artifacts
Partial: evidence exists, but closure still needs accepted review, refresh, or remaining control work.
B.22.2
Identifying critical assets requiring high availability
CS Preparedness Questionnaire row 231
soc evidence
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.22.3
Performing business impact analysis
CS Preparedness Questionnaire row 232
soc evidence
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.22.4
Implemenring process for redundancy
CS Preparedness Questionnaire row 233
soc evidence
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.3.1
Risk identification and remediation
CS Preparedness Questionnaire row 24
manual task
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.3.2
Risk analysis
CS Preparedness Questionnaire row 25
manual task
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.3.3
Risk response
CS Preparedness Questionnaire row 26
manual task
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.3.4
Regular risk identification and tracking
CS Preparedness Questionnaire row 27
manual task
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.3.5
Defining risk assessment process
CS Preparedness Questionnaire row 28
manual task
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.3.6
Establishing cybersecurity risk register
CS Preparedness Questionnaire row 29
manual task
IN PROGRESS
partial
1 fresh / 0 stale
0 accepted · no parsed artifacts
Partial: evidence exists, but closure still needs accepted review, refresh, or remaining control work.
B.5.1
Identifying areas of cybersecurity-related law and regulation
CS Preparedness Questionnaire row 47
manual task
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.5.2
Establishing measures to ensure compliance
CS Preparedness Questionnaire row 48
manual task
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.5.3
Communicating cybersecurity laws, regulations and guidelines to employees for compliance
CS Preparedness Questionnaire row 49
manual task
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.5.4
Defining process for compliance
CS Preparedness Questionnaire row 50
manual task
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.7.1
Cybersecurity measures in Cyber Essentials
CS Preparedness Questionnaire row 66
soc evidence
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.7.2
Cybersecurity measures in Cyber Essentials
CS Preparedness Questionnaire row 67
soc evidence
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.7.3
Tracking metrics of employee cybersecurity awareness
CS Preparedness Questionnaire row 68
connector check
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.7.4
Performing cybersecurity awareness assessments
CS Preparedness Questionnaire row 69
connector check
READY
met
1 fresh / 0 stale
0 accepted · no parsed artifacts
Pre-audit ready: control has fresh evidence and has been marked ready.
B.7.5
Appointing cybersecurity champion
CS Preparedness Questionnaire row 70
connector check
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.8.1
Cybersecurity measures in Cyber Essentials
CS Preparedness Questionnaire row 78
soc evidence
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.8.2
Cybersecurity measures in Cyber Essentials
CS Preparedness Questionnaire row 79
soc evidence
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.8.3
Assets handling policy and procedure
CS Preparedness Questionnaire row 80
connector check
READY
met
1 fresh / 0 stale
0 accepted · no parsed artifacts
Pre-audit ready: control has fresh evidence and has been marked ready.
B.8.4
Measures handling highly classified assets
CS Preparedness Questionnaire row 81
connector check
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.8.5
Defining roles and responsibilities for managing assets in inventory
CS Preparedness Questionnaire row 82
connector check
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.9.1
Cybersecurity measures in Cyber Essentials
CS Preparedness Questionnaire row 89
connector check
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.9.2
Reporting of data breach
CS Preparedness Questionnaire row 90
manual task
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.9.3
Aligning encryption algorithm and key length to industry best practices
CS Preparedness Questionnaire row 91
manual task
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.9.4
Cybersecurity measures in Cyber Essentials
CS Preparedness Questionnaire row 92
connector check
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.9.5
Measures for handling highly classified assets
CS Preparedness Questionnaire row 93
connector check
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.9.6
Establishing data flow diagram
CS Preparedness Questionnaire row 94
manual task
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.
B.9.7
Secure data handling policy and procedure
CS Preparedness Questionnaire row 95
manual task
NOT STARTED
missing
0 fresh / 0 stale
0 accepted · no parsed artifacts
Not ready: collect or refresh evidence before presenting this control.

Signed evidence — the fusion · 0

No signed packs.