Configuration
Organisation configuration
Controls required for production deployment. These six areas explain what an organisation must establish before handling real incident information.
Production controls
Configuration and verification are not available in this demonstration.
Organisation & deployment
Establish ownership, hosting and accountable operation.
Organisation identity, deployment environment, responsible owner, platform hardening and update arrangements.
Identity & access
Restrict who can configure DIR, respond and submit reports.
Individual administrator and Responsible Group accounts, strong authentication, server-enforced permissions, temporary submission-only reporter access and access reviews.
Record protection
Protect incident information throughout its lifecycle.
Secure transport, encrypted working records and backups, organisation-controlled key management, secret protection and tested recovery.
Reporting & response
Define accountable people and escalation routes.
Responsible Group membership, reporting channels, urgent protective escalation, notification responsibilities and response continuity.
Audit & retention
Preserve accountability without creating a permanent second archive.
Tamper-evident event history, authorised access logs, retention rules, incident corrections, secure disposal and evidence of completion.
Handover & verification
Confirm organisational custody before temporary records are removed.
Authorised destination and recipient, protected transfer, receipt and completeness verification, failure handling and controlled disposal.
These categories describe the intended controls, not a completed security assessment. Production requires implementation, testing and verification before real personal data is processed.
Demonstration controls
Resetting clears this tab's submitted observations and response histories.