Finance
Purchasing Approval Matrix
20 approved policy statements are activated from this source.
DOC-FIN-0003 · SRC-5636F94E1DA4FF8CE9D9C95FD0CDPROOF SPACE
Experience Organizational Intelligence
See how SALARA turns a policy document into activated Organizational Intelligence, then ask a question and Replay the evidence behind the answer.
- Policy document source
- Activated intelligence only
- Deterministic Runtime
- Replayable evidence
What you are doing
- Choose a documentStart from an activated policy source.
- Inspect the contentReview the governed statements SALARA compiled.
- Ask a questionReceive a deterministic answer and open Replay.
Policy document experiences
Choose a document
Each available document is backed by activated Organizational Intelligence.
Human Resources
Remote Work Policy
54 approved policy statements are activated from this source.
DOC-HR-0005 · SRC-1DE734B79FD1BA337ED2D3E066EEInformation Security
MFA Standard
19 approved policy statements are activated from this source.
DOC-IT-0003 · SRC-594156BCE10E5BB8CEFC271A91E2Information Security
Privileged Access Standard
20 approved policy statements are activated from this source.
DOC-SEC-0004 · SRC-565D08896030A88C111A7224DF98Information Security
Data Classification and Handling Standard
31 approved policy statements are activated from this source.
DOC-SEC-0005 · SRC-6E538DE827A73F0439799AD79070IT Operations
Escalation and Incident Response Guide
58 approved policy statements are activated from this source.
DOC-OPS-0003 · SRC-5991452A065397B573265DC07B98Document content
What SALARA activated
These approved statements are the content Runtime can use. Answers stay inside this activated boundary.
Information Security · Activated document
MFA Standard
19 approved statements · DOC-IT-0003 · SRC-594156BCE10E5BB8CEFC271A91E2- The IT Director owns this standard.
ASSERT-0384CFA71609926CD4DD61822FD6C2DE · v1- A factor reset requires identity verification proportional to the access at risk.
ASSERT-03CC8FF5B61A73267A0BE390D97B3115 · v1- An account with three failed factor challenges is locked pending service desk review.
ASSERT-09615198154684403BB710F0ECB7781E · v1- Contractors must complete factor enrollment within one business day of engagement start.
ASSERT-27CC901114D0F0EB0DBD20F170C450FE · v1- The service desk must verify a government photo identifier before resetting a privileged factor.
ASSERT-45DD71337B68B6340C15304E9B1F5C71 · v1- Recovery codes are issued once at enrollment.
ASSERT-48632E96A120AE80822D7C81E6120C52 · v1- IT must review all active exceptions each month.
ASSERT-5765B09395909E5E94ED22232048184A · v1- Manager confirmation is required for any factor reset requested outside business hours.
ASSERT-6B785E76AB803EC315B45F3A60B3A70B · v1- Service accounts are exempt from interactive factor enrollment under a documented exception.
ASSERT-6CDEF8F941D9D5EAFEE31B04961CAAC9 · v1- Compass One requires a phishing-resistant factor for all administrative consoles.
ASSERT-74E433ACD9934CCE042736C71C274B9E · v1- Every Compass One account must enroll multi-factor authentication before first system use.
ASSERT-7CCDDB755E0E6CDDE1A26A73A541309D · v1- Authenticator application push approval is permitted for standard workforce access.
ASSERT-802DC5D6E5B17BBF0B8BC4A78E858E51 · v1- Hardware security keys are the preferred factor for privileged roles.
ASSERT-9BE442348D8EB2E987A7F47FA94D9336 · v1- Employees must register a second backup factor within seven days of enrollment.
ASSERT-9D5F90670E6D1ECAF5974F5A6C88C8C2 · v1- Employees must store recovery codes in the approved password manager.
ASSERT-CF9C0AA30554C6C764AA37430F1A62F5 · v1- An MFA exception requires CISO approval with a documented compensating control.
ASSERT-D7CF2B6BBBC32E45809226705156A4E0 · v1- Voice call delivery is prohibited for any account with customer data access.
ASSERT-D93BA88840AEA0BDE1098EA3F3E1459D · v1- SMS delivery is prohibited as a primary authentication factor.
ASSERT-F466FA1BF81D9F5AE0F9B16A560F3DBA · v1- Repeated authentication denial reports must be escalated to Security within one hour.
ASSERT-FF2F4A5ACE17349E8FDD641DEB69EF6A · v1
From the activated intelligence
Suggested questions
These examples are derived deterministically from approved Assertions in the active compiled artifact.
What does the policy say about - The IT Director owns this standard?
Ask this questionWhat does the policy say about - A factor reset requires identity verification proportional to the access at risk?
Ask this questionWhat does the policy say about - An account with three failed factor challenges is locked pending service desk review?
Ask this questionWhat does the policy say about - Contractors must complete factor enrollment within one business day of engagement start?
Ask this questionWhat does the policy say about - The service desk must verify a government photo identifier before resetting a privileged factor?
Ask this questionWhat does the policy say about - Recovery codes are issued once at enrollment?
Ask this questionOne discipline, four ways to explore
Learn. Understand. Experience. Explore.
- Handbook
- Learn the discipline.
- Guide
- Understand the concepts.
- Proof Space
- Experience Organizational Intelligence.
- Research Library
- Explore the supporting evidence.