Security Policy Management demo

What the demo shows

Drafts and maintains security policies, gap-checked against ISO 27001, SOC 2 and real practice

Agents split each policy into its “shall” statements and test every one against the systems that prove it, every night: the identity directory, the vault, the service desk, HR, endpoint, cloud and the scanner. On the policy itself each statement carries a thread to its procedure, owner, Annex A or SOC 2 control and live evidence, green where practice matches and red where it does not. When a promise is broken, the Reality agent shows the records, the Exception keeper tests the safeguards and the Drafter sets out the honest options; the CISO decides with a reason code. New wording is checked by the Coverage reviewer and tested by the Reality agent before the CISO signs. The Attestation agent asks only the people affected, in their language, answers their questions with the clause, and turns unclear clauses into clarifications.

Transcript

1. 0:00Security Policy Management keeps security policies true for the CISO and policy owners.
2. 0:09An outside gap analysis costs €5,000 to €15,000 and is out-of-date fast.
3. 0:17Here, agents check 583 policy statements every night.
4. 0:23Each shell threads to its owner, control and evidence.
5. 0:28Green where practice matches, red where not.
6. 0:33Access Control says all privileged access shall use MFA.
7. 0:39The reality agent found 37 service accounts without it and lists each one.
8. 0:46The exception keeper checked the safeguards.
9. 0:50Three passwords are overdue.
10. 0:53Two options, a six-week MFA project or an exception with conditions.
11. 1:00Rachel Kim, the CISO, approves the exception with a reason code and a 90-day review.
12. 1:09Every answer cited, every decision signed and logged.
13. 1:15The result, every promise tested nightly and no surprises at audit.
14. 1:21Built on Botminds: agents, data, screens and governance on one platform.

Transcribed from the film’s narration. Captions are on the player.