{
    "componentChunkName": "component---src-templates-note-note-js",
    "path": "/notes/ITGC",
    "result": {"data":{"mdx":{"body":"var _excluded = [\"components\"];\nfunction _extends() { _extends = Object.assign ? Object.assign.bind() : function (target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i]; for (var key in source) { if (Object.prototype.hasOwnProperty.call(source, key)) { target[key] = source[key]; } } } return target; }; return _extends.apply(this, arguments); }\nfunction _objectWithoutProperties(source, excluded) { if (source == null) return {}; var target = _objectWithoutPropertiesLoose(source, excluded); var key, i; if (Object.getOwnPropertySymbols) { var sourceSymbolKeys = Object.getOwnPropertySymbols(source); for (i = 0; i < sourceSymbolKeys.length; i++) { key = sourceSymbolKeys[i]; if (excluded.indexOf(key) >= 0) continue; if (!Object.prototype.propertyIsEnumerable.call(source, key)) continue; target[key] = source[key]; } } return target; }\nfunction _objectWithoutPropertiesLoose(source, excluded) { if (source == null) return {}; var target = {}; var sourceKeys = Object.keys(source); var key, i; for (i = 0; i < sourceKeys.length; i++) { key = sourceKeys[i]; if (excluded.indexOf(key) >= 0) continue; target[key] = source[key]; } return target; }\n/* @jsxRuntime classic */\n/* @jsx mdx */\n\nvar _frontmatter = {};\nvar layoutProps = {\n  _frontmatter: _frontmatter\n};\nvar MDXLayout = \"wrapper\";\nreturn function MDXContent(_ref) {\n  var components = _ref.components,\n    props = _objectWithoutProperties(_ref, _excluded);\n  return mdx(MDXLayout, _extends({}, layoutProps, props, {\n    components: components,\n    mdxType: \"MDXLayout\"\n  }), mdx(\"p\", null, mdx(\"strong\", {\n    parentName: \"p\"\n  }, \"The four areas they'll probe, and typical startup gaps\")), mdx(\"p\", null, \"\", mdx(\"a\", {\n    parentName: \"p\",\n    \"href\": \"/notes/Access-management\",\n    \"title\": \"Access management\"\n  }, \"Access management\"), \" is where most startups bleed. Expect questions on: joiner-mover-leaver process (is deprovisioning tied to HR offboarding, or does someone \\\"remember\\\" to revoke access?), privileged access to production databases and the ERP, shared credentials, and periodic access reviews with evidence. Given your inter-entity Velynk flows and lending infra, segregation of duties matters \\u2014 the person who can create a vendor/farmer shouldn't be able to approve payouts to them. Direct production DB access by engineers for \\\"quick fixes\\\" is the classic finding.\"), mdx(\"p\", null, \"\", mdx(\"a\", {\n    parentName: \"p\",\n    \"href\": \"/notes/Change-management\",\n    \"title\": \"Change management\"\n  }, \"Change management\"), \" \\u2014 do code changes to systems touching financial data go through review, testing, and approval before deployment? Self-hosted GitLab CI/CD helps here if you can show PR reviews, protected branches, and deployment approvals as evidence. The gap auditors find: hotfixes pushed directly, or the same person authoring and approving.\"), mdx(\"p\", null, \"\", mdx(\"a\", {\n    parentName: \"p\",\n    \"href\": \"/notes/IT-operations\",\n    \"title\": \"IT operations\"\n  }, \"IT operations\"), \" \\u2014 backup and restore (not just \\\"we have backups\\\" but \\\"we've tested restoration\\\"), monitoring, incident logging, job scheduling failures for things like your harvest line data pipelines.\"), mdx(\"p\", null, \"\", mdx(\"a\", {\n    parentName: \"p\",\n    \"href\": \"/notes/Third-parties\",\n    \"title\": \"Third parties\"\n  }, \"Third parties\"), \" \\u2014 you likely rely heavily on SaaS (Zoho, cloud infra, payment/lending partners). Auditors will ask about vendor risk assessment and whether you've reviewed their \", mdx(\"a\", {\n    parentName: \"p\",\n    \"href\": \"/notes/SOC-reports\",\n    \"title\": \"SOC reports\"\n  }, \"SOC reports\"), \".\"));\n}\n;\nMDXContent.isMDXComponent = true;","inboundReferences":[{"id":"d78183a2-e3b7-568b-96de-82fb300dbaa8","slug":"Internal-Audits"}]}},"pageContext":{"slug":"ITGC","node":{"childMdx":{"slug":"ITGC"}}}},
    "staticQueryHashes": []}