Link to records

anDREa's Access Control Policy applies.

Some documents, records especially, might not be accessible. Authorized access will be issued based on invitation by anDREa. Access requests will be rejected by default.

ISO 27001 related

Record	ISO 27001:2013
Records of training, skills, experience & qualifications	7.2
Monitoring and measurement results	9.1
Internal audit program	9.2
Results of internal audits	9.2
Results of the management review	9.3
Results of corrective actions	10.1
Logs of user activities, exceptions, & security events	A.12.4.1, A.12.4.3

Other

1. Core Access Register
   
2. Inventory of Assets
   
3. Policy Exceptions
   

1. Data Breach Register
   
2. Risk, Incident and Treatment Plan Register
   

1. Internal Audit Reports
   
2. Pentest reports
   
3. Risk assessment report
   

• Related Articles

• ISO 27001 - Overview & Statement of Applicability

  Introduction This page is the stepping stone to all ISO 27001 related policies and procedures. To view the complete ISMS and all related documentation visit looker studio. anDREa's Access Control Policy applies. Some documents, records especially, ...

• anDREa B.V. obtains ISO 27001 certification

  Version: 2022-09-15 TL;DR: anDREa B.V. obtained ISO 27001 certification. Feel free to download the certificate (attached at the bottom). Introduction anDREa B.V. is committed to protecting the security of its business information in the face of ...

• Data Protection Impact Assessment (DPIA)

  First version: 2021-05-13 Last updated: 2025-10-28 Last change: Link to the most recent version myDRE DPIA can be found under isms.andrea-cloud.com > Supporting documents

• Data Breach Procedure

  First version: 2021-04-15 Last updated: 2025-10-28 Last change: new link to isms.andrea-cloud.com Last reviewed: 2024-10-30 can be found under isms.andrea-cloud.com > Supporting Documents Data Breach Procedure

• Retention & Destruction Policy

  Version: 2.0 Valid until: 2025-04-12 Classification: Low Version Management Version Author(s) Change(s) Date approved 1.0 Stefan van Aalst Edward Robinson Initiation document 2022-06-08 1.1 Edward Robinson Additions/changes as part of the periodic ...