Access Audit Log (Personnel & Infrastructure)

Policy: Comprehensive audit of all 'CheckTick' staff accounts with access to NHS-related infrastructure.

Audit Record: 29/12/2025

Performed by: [DPO Name] (SIRO)

System Account Found Role Status Verified?
Northflank [DPO Name] Admin/SIRO Active โœ…
Northflank [SIRO Name] Admin/CTO Active โœ…
GitHub [DPO Name] Owner Active โœ…
GitHub [SIRO Name] Owner Active โœ…
PostgreSQL ct_prod_admin DB Admin Active โœ… (Rotated)

Audit Findings:

  • Leavers: 0 staff departures in this period; no accounts required deactivation.
  • Inappropriate Access: 0 instances of over-privileged access found.
  • MFA Check: Confirmed MFA is active on 100% of administrative entry points.
  • Action Taken: Rotated the primary database administration credentials as a proactive measure.

Next Audit Due: [Date + 3 Months]