Skip to main content

PensionPortal.ai home page

Getting Started

Introduction
Scope and Audience
System Boundaries
Definitions and Glossary
Roles and Responsibilities
Contact and Support

IORP II

IORP II Overview
Governance Framework
Own-Risk Assessment (ORA)
Key Function Holders
Outsourcing Rules
OMA Transition to IORP II
Supervisory Review Readiness

Frameworks

ISO 27001:2022 & ISO 27002:2022 Overview
Multi-Framework Mapping Rules
ISO 27001/27002 Control Matrix
GDPR Article Crosswalk
DORA Crosswalk
Irish Pensions Legislation Crosswalk
IORP II Article Crosswalk

Architecture

System Overview
Domain And Routing
Multi Tenant Architecture
Data Flows
Data Model Overview
Crypto And Key Management
Logging Architecture
Availability And Scaling
Dependency And Vendor Map

Tenancy

Tenant Resolution
Isolation Model
Database Isolation
Storage Isolation
Tenant Provisioning
Tenant Offboarding
Cross Tenant Security Tests

Security

Security Overview
Authentication Auth0
Mfa And Privileged Access
Authorization Rbac
Session And Cookie Policy
Secure Development Sdlc
Vulnerability Management
Secrets Management
Encryption At Rest And In Transit
Security Headers Csp Hsts
Rate Limiting And Abuse
Audit Logging
Monitoring And Alerting
Sentry Observability
Cloudflare Waf And Zero Trust

Compliance

Compliance Architecture Overview
Data Retention & Deletion
Data Subject Rights
Privacy by Design & DPIA Guide
Vendor & Sub-Processor Register
Records of Processing Activities (RoPA)

Operations & Resilience

Operating Model
Backup And Restore
Disaster Recovery
Incident Response
Availability Slo Sli
Change Management
Access Reviews
Log Retention And Integrity
Resilience Testing Program

AI & Providers

Ai Governance And Human Approval
Ai Data Minimization
Ai Provider Abstraction
Ai Provider Risk Controls
Ai Auditability
Elevenlabs Voice Controls

Deployment

Vercel Architecture
Vercel Environments
Cloudflare Dns Tls
Cloudflare Waf
Cloudflare Zero Trust Blueprint
Domain Redirects
Rollout And Rollback

Runbooks

Tenant Provisioning Runbook
Security Incident Runbook
Backup Restore Runbook
Service Degradation Runbook
Vendor Outage Runbook
Evidence Pack Generation Runbook

Appendices

Risk Register
Threat Model (STRIDE)
Board Pack Index
Templates

Session And Cookie Policy

Security

Session And Cookie Policy

Session And Cookie Policy

Content coming soon.

Was this page helpful?

Authorization Rbac Secure Development Sdlc

⌘I

Assistant

Responses are generated using AI and may contain mistakes.