Compliance

The Compliance section is Cadence OneFive’s internal home for formal compliance and policy material — the ISO 27001 / SOC 2 information-security policies, the formal HR compliance policies, and the product accessibility policy. It is kept separate from the day-to-day Handbook so the material auditors, procurement reviewers, and compliance reviewers need lives in one place. This section is internal-only and is not published to the public handbook.

Sections

• IT Security — the Information Security Policy manual, ISMS, Statement of Applicability, risk treatment and assessment, internal audit, corrective action, and the supporting security control policies (logging, monitoring, hardening, encryption, backup, business continuity/DR, vendor management, and more).
• HR Compliance — formal HR compliance policies: background checks, employment-at-will, and conflicts & confidentiality.
• Product Accessibility — the accessibility standard Momentum is held to, how conformance is verified, and how shortfalls are recorded and remediated.

Everyday workplace guidance that staff reference regularly — benefits, design & branding, and general HR & workplace policies — remains in the Handbook Policies.