DEMO TENANTOperator-side data (staff, contacts, calendar, training, grants, complaints, SAR, four-eyes reviews) is illustrative — not a real Greentube record. Connector output, evidence-ledger anchors, RFC 3161 timestamps, Postgres RLS, regulator-source ingestion and LLM extractions are the real machine. Rows marked demo are seeded fixtures.
Georg Gubo
MGA · UKGC · ADM · RO-ONJN · SK-MFSR · DGOJ · GGL · SPI · NJ-DGE · MI-MGCB · PA-PGCB
← Controls library

Production deploy segregation: code review required on main

SOC2.CC5.SEPDUTIES · GLOBAL · operational_security
Severity
high
Cadence
weekly
Region
global
Current status (Greentube Internet Entertainment Solutions GmbH)
not evaluated

Requirement

Production deploys originate only from the main branch. The main branch requires a passing CI run plus one reviewer approval (waived while the team is solo-founder; restored automatically at first hire).

Source: AICPA TSC — CC5 Control Activities (segregation of duties)

Evidence specification

Evidence typeConnectorSpecAcceptance criteria
infra_configcloud-aws
{
  "resource_type": "github_branch_protection",
  "branch": "main",
  "required_fields": [
    "required_reviewers",
    "require_status_checks",
    "last_modified_at"
  ]
}
  • required_reviewers >= 1 OR documented solo-founder waiver
  • require_status_checks == true

Recent evaluations (Greentube Internet Entertainment Solutions GmbH)

No evaluation history for this control yet.