FEHA Logo
FEHA

ANS Group

ANS Group Ltd. (ANS) is a leading Manchester-based digital transformation, cloud, and managed security services provider.
Contact us
support@ans.co.uk
IT Services & Consulting

Resources

Consent Management Policy

A Consent Management Policy is an organizational framework that dictates how a business collects, documents, manages, and honors user permission for handling personal data. It ensures that organizations comply with global privacy laws (such as GDPR or CCPA) and allows consumers to control how their data is used.

Approved at 22nd Jun, 2026 at 01:53:09
Private

Data Processing Agreements (DPAs)

A Data Processing Agreement (DPA) is a legally binding contract between a data controller (the entity that decides how and why data is processed) and a data processor (the third party handling the data). It mandates how personal information is managed, secured, and protected to ensure compliance with privacy laws.

Approved at 24th Jun, 2026 at 05:09:32
Private

Incident Response Plan

An Incident Response Plan (IRP) is a documented, formal strategy that outlines the exact processes, roles, and procedures an organization follows to detect, contain, mitigate, and recover from cybersecurity attacks, data breaches, or other significant operational disruptions.

Approved at 9th Jun, 2026 at 02:57:40
Private

In Progress Compliance

This score is determined through an assessment performed by our FEHAGRC Consultant tes.

CIS 8.1COMPLIANCEMONITOREDBY FEHA

CIS 8.1

35 of 155 measures implemented

ISO27001:2022COMPLIANCEMONITOREDBY FEHA

ISO 27001:2022

73 of 124 measures implemented

ISO42001:2023COMPLIANCEMONITOREDBY FEHA

ISO 42001:2023

41 of 91 measures implemented

NIS 2COMPLIANCEMONITOREDBY FEHA

NIS 2

16 of 41 measures implemented

SOC 2COMPLIANCEMONITOREDBY FEHA

SOC 2

98 of 141 measures implemented

2 Measures

Encryption / Cryptography

Encryption Policy
Cryptographic Configuration Standards and Implementation Records
3 Measures

Documentation & Transparency

User and Service Account Inventory with Activity Logs
System Fact Sheets (Model Cards)
On-boarding Records
2 Measures

Correction

Nonconformity and Corrective Action Register
Adversarial Attack Simulation Report
4 Measures

Internal Audit

Internal Audit Report
Internal Audit Programme
Audit Procedures/Methodology
3 Measures

Business Continuity

Business Continuity Plan
Disaster Recovery Plan
Load Balancer Configuration (internal pentest bac test)
7 Measures

Incident Management

Records of AI Concerns Reports
Incident Response Plan
Incident Response Procedure
1 Measures

Equipment

Secure Disposal or Re-use of Equipment Procedure
1 Measures

Site Security

Physical Security Policy
5 Measures

Vulnerability Management

Penetration Testing Report
Threat Assessment Report
Vulnerability Scanning Report
6 Measures

Test Information

Test Data Management Policy or Procedure
Access Controls for Test Environments
Test Plans Documentation
4 Measures

Source Code

Access Control Configurations for Source Code Repositories
Version Control System Logs
Secure Coding Guidelines
13 Measures

Secure Development

Software Development Life Cycle
Asset Patch Update Log
Technical Development Guidelines for AI Fairness and Safety
4 Measures

Backups

Information Backup Policy
Clock Synchronization Documentation
Backup Schedule and Success Logs
4 Measures

Endpoint Security

Device Configuration Standards or Baselines
Antivirus/Anti-malware Software Deployment and Update Logs
Approved Software List (Whitelist)
2 Measures

Data Masking

Data Masking Policy
Data Masking Documentation
3 Measures

Secure Authentication

Multi-Factor Authentication (MFA) Implementation Records
Procedures for Managing Authentication Credentials
Password Policy
9 Measures

Logging & Monitoring

Logging and Monitoring Policy
Monitoring activities documentation
Endpoint Management System Records
3 Measures

Network Security

Network Diagram
Network Security Policy
WAF configuration
1 Measures

Data at Rest

Data-at-Rest Encryption Standard
2 Measures

Data in Transit

Data-in-Transit Encryption Standard
SSL/TLS Lifecycle Log
5 Measures

Access Control

Access Control Policy
Access Reviews Documentation
Records of Privileged Account Inventory
16 Measures

Data Protection

Data Catalog Entries/Metadata Records for AI Datasets
Data Retention and Disposal policies
Data Classification Policy
7 Measures

Inventory

AIMS Awareness Training Logs
Document Templates
Asset Management Policy
2 Measures

Remote Working

Remote Working Policy
Examples of Security Reminders
4 Measures

Training

AI Competence Assessment Matrix
Training Records
Certifications and Qualifications
5 Measures

Onboarding/Offboarding

Acceptable Use Policy
Off-boarding Checklist
Contracts or Agreements with Outsourced Developers
3 Measures

Recruitment

Template Employment Contract
Personnel Background Verification
Code of Conduct
1 Measures

Vendor Management

Vendor Management Policy
2 Measures

Objectives

Information Security Objectives
AI Objective Action Plan
8 Measures

Management Documentation

Internal Wiki
Management Review Meeting
Budget Allocation Records
2 Measures

Change Management

Change Management Policy
Change Request Forms / Change Log
6 Measures

Risk Management

Risk Assessment Report
Risk Assessment Policy
Risk Assessment Input
6 Measures

Interested Parties

Stakeholder Analysis
List of contact special interest groups
Customer Contracts/SLAs
9 Measures

Legal & Regulatory

List of relevant authorities
Applicable Laws and Regulations
Request Handling Procedure
3 Measures

Roles & Responsibilities

RACI Matrix
Roles and Responsibilities
Organizational Charts
7 Measures

Management System Documentations

AI Management System Process Flowcharts/Maps
Information Security Management System (ISMS) Plan
Information Security Policy