01 · Ownership
The right owner, suggested with a reason
One screen puts an owner on every required control in a programme. Cylanto suggests who, says why in words, and takes every top suggestion at once if you agree.
- Drop in your organisation chart, and people, units and named roles are filled in for you.
- One owner per control, requirement, check or policy. Anything unnamed falls to the owner above it, so nothing is left to nobody.
- It tells you when the load sits with one person, and publishes a RACI and an access review as evidence.
Why it matters
Accountability you can read off the screen, instead of a spreadsheet of names that goes stale.
| Control | What it is | Owner | Suggested |
|---|---|---|---|
| CTL-IAM-04 | Multi-factor authentication is enforced for production and regulated-data access | RORita Okonkwo | — |
| CTL-IAM-01 | Access is provisioned through an approved request and authorisation process | Rita Okonkwo | |
| CTL-CRY-02 | Data in transit is protected with strong cryptography | Noor Haddad |
02 · Policies
Policy acceptance that proves itself
Publish a policy and ask everyone to accept it. Each person gets a private link and needs no account. Cylanto keeps the list, chases the outstanding and writes the record.
- See who has accepted, who has not, and how they did it.
- The acknowledgement report is generated from the record, never uploaded.
- Each policy moves from draft through approval to in force, with its next review on the calendar.
Why it matters
No more chasing signatures by email, and the proof an auditor wants already exists.
| Person | Status | How |
|---|---|---|
| Luca Marchetti | accepted | signed in |
| Noor Haddad | accepted | private link |
| Amara Bello | outstanding | link sent |
03 · Requests
Evidence collected from whoever holds it
Every evidence request carries an owner, a due date and the period it must cover. Each person sees their own list, and someone with no login can still answer by a single-use link.
- My work puts what is asked of you, what you still owe and the biggest next move in one place.
- A request closes itself when the document arrives. Whoever supplied a document cannot also accept it.
- Digest emails carry titles and links only, at most every fifteen minutes. The detail stays in the platform.
Why it matters
The work reaches the person who holds the answer, and the compliance team stops being the postbox.