Printed from CheckTick DSPT Compliance Documentation
Access Audit Log (Personnel & Infrastructure)
Policy: Comprehensive audit of all 'CheckTick' staff accounts with access to NHS-related infrastructure.
Audit Record: 29/12/2025
Performed by: [DPO Name] (SIRO)
| System | Account Found | Role | Status | Verified? |
|---|---|---|---|---|
| Northflank | [DPO Name] | Admin/SIRO | Active | โ |
| Northflank | [SIRO Name] | Admin/CTO | Active | โ |
| GitHub | [DPO Name] | Owner | Active | โ |
| GitHub | [SIRO Name] | Owner | Active | โ |
| PostgreSQL | ct_prod_admin |
DB Admin | Active | โ (Rotated) |
Audit Findings:
- Leavers: 0 staff departures in this period; no accounts required deactivation.
- Inappropriate Access: 0 instances of over-privileged access found.
- MFA Check: Confirmed MFA is active on 100% of administrative entry points.
- Action Taken: Rotated the primary database administration credentials as a proactive measure.
Next Audit Due: [Date + 3 Months]