Sandbox Seeding

FDA: Part 11

“implement controls, including audit trails… for software and systems involved in processing electronic data”

SEC: Risk alert

“Implement targeted policies and procedures to ensure ongoing monitoring of cloud-based platforms”

BASEL II

“Data backups, archiving, retrieval and restoration with 3-7 years of all data history”

GDPR: Article 30

“Records of processing activities must be maintained… and be made available to the supervisory authority on request.”

PCI DSS: Sec 10.3.x

“Implement automated audit trails… access to all audit trails; creation and deletion of system-level objects”

AICPA SOC

“Audit trails providing sufficient context (who, what, when, where, how) to allow for a rapid and accurate response.”

SOX Act: Sec 302, 404 & 409

“…outline how to create, modify and maintain accounting systcomputerems, including programs handling any financial data”

FISMA

“Require continuous monitoring activities”

PIPEDA: Principle 6 – Accuracy

“Keep personal information as accurate, complete and up to date as necessary… record the date when the personal information was obtained or updated.”

EU GMP – Annex 11 Sec. 9

“…the creation of a record of all GMP-relevant changes and deletions (a system generated “audit trail”)”

CCPA PWC

“…data inventory and mapping of in-scope personal data and instances of “selling” data”

FINRA

“Various policies and procedures protecting against unauthorized access to or use of customer records or information.”

Gramm-Leach-Bliley Act

“…safeguard sensitive data; know where sensitive customer information is stored and store it securely”