# Harpe Wiki

## Harpe Wiki

- [Introduction](https://manual.harpe.io/start/introduction.md)
- [Set up your ISMS](https://manual.harpe.io/start/getting-started/set-up-your-isms.md): Welcome to Harpe - lets get you set up
- [Add employees](https://manual.harpe.io/start/getting-started/set-up-your-isms/add-employees.md)
- [Complete management details](https://manual.harpe.io/start/getting-started/set-up-your-isms/complete-management-details.md)
- [Add your first asset](https://manual.harpe.io/start/getting-started/set-up-your-isms/add-your-first-asset.md)
- [Add your first supplier](https://manual.harpe.io/start/getting-started/set-up-your-isms/add-your-first-supplier.md)
- [Add your first risk](https://manual.harpe.io/start/getting-started/set-up-your-isms/add-your-first-risk.md)
- [Add your first CAPA](https://manual.harpe.io/start/getting-started/set-up-your-isms/add-your-first-capa.md)
- [Add your first incident](https://manual.harpe.io/start/getting-started/set-up-your-isms/add-your-first-incident.md)
- [Review your documents tab](https://manual.harpe.io/start/getting-started/set-up-your-isms/review-your-documents-tab.md)
- [Assess your compliance](https://manual.harpe.io/start/getting-started/set-up-your-isms/assess-your-compliance.md)
- [Configure your Harpe feed](https://manual.harpe.io/start/getting-started/set-up-your-isms/configure-your-harpe-feed.md)
- [Management](https://manual.harpe.io/start/manual/management.md): Configure key pieces of information about your organisation.
- [Overview](https://manual.harpe.io/start/manual/management/overview.md): Highlight key points about your business.
- [Objectives](https://manual.harpe.io/start/manual/management/objectives.md): Set your organisation's goals and targets.
- [Overview](https://manual.harpe.io/start/manual/management/objectives/overview.md): Set your organisation's goals and targets.
- [Adding an Objective](https://manual.harpe.io/start/manual/management/objectives/adding-an-objective.md)
- [Viewing an Objective](https://manual.harpe.io/start/manual/management/objectives/viewing-an-objective.md)
- [Example Objectives](https://manual.harpe.io/start/manual/management/objectives/example-objectives.md)
- [Interested Parties](https://manual.harpe.io/start/manual/management/interested-parties.md): Track parties with a vested interest in your organisation.
- [Overview](https://manual.harpe.io/start/manual/management/interested-parties/overview.md): Track parties with a vested interest in your organisation.
- [Adding an Interested Party](https://manual.harpe.io/start/manual/management/interested-parties/adding-an-interested-party.md)
- [Viewing an Interested Party](https://manual.harpe.io/start/manual/management/interested-parties/viewing-an-interested-party.md)
- [Example Interested Parties](https://manual.harpe.io/start/manual/management/interested-parties/example-interested-parties.md)
- [Management Review](https://manual.harpe.io/start/manual/management/management-review.md): Plan reviews to keep your organisation on track.
- [Overview](https://manual.harpe.io/start/manual/management/management-review/overview.md): Plan reviews to keep your organisation on track.
- [Adding a Management Review](https://manual.harpe.io/start/manual/management/management-review/adding-a-management-review.md)
- [Viewing a Management Review](https://manual.harpe.io/start/manual/management/management-review/viewing-a-management-review.md)
- [Example Management Reviews](https://manual.harpe.io/start/manual/management/management-review/example-management-reviews.md)
- [Audit](https://manual.harpe.io/start/manual/management/audit.md): Plan your internal and external audits.
- [Overview](https://manual.harpe.io/start/manual/management/audit/overview.md): Plan your internal and external audits.
- [Adding an Audit](https://manual.harpe.io/start/manual/management/audit/adding-an-audit.md)
- [Viewing an Audit](https://manual.harpe.io/start/manual/management/audit/viewing-an-audit.md)
- [Example Audits](https://manual.harpe.io/start/manual/management/audit/example-audits.md)
- [Legal and Regulatory](https://manual.harpe.io/start/manual/management/legal-and-regulatory.md): Track legislations governing your organisation's operations.
- [Overview](https://manual.harpe.io/start/manual/management/legal-and-regulatory/overview.md)
- [Adding a Legislation](https://manual.harpe.io/start/manual/management/legal-and-regulatory/adding-a-legislation.md)
- [Viewing a Legislation](https://manual.harpe.io/start/manual/management/legal-and-regulatory/viewing-a-legislation.md)
- [Example Legislations](https://manual.harpe.io/start/manual/management/legal-and-regulatory/example-legislations.md)
- [Feed](https://manual.harpe.io/start/manual/feed.md): Monitor your notifications and tasks.
- [Assets](https://manual.harpe.io/start/manual/assets.md): Manage your assets and compliance.
- [Overview](https://manual.harpe.io/start/manual/assets/overview.md): Manage your assets and compliance.
- [Adding an Asset](https://manual.harpe.io/start/manual/assets/adding-an-asset.md)
- [Viewing an Asset](https://manual.harpe.io/start/manual/assets/viewing-an-asset.md)
- [Example Assets](https://manual.harpe.io/start/manual/assets/example-assets.md)
- [Suppliers](https://manual.harpe.io/start/manual/suppliers.md): Track your organisation's suppliers and their compliance.
- [Overview](https://manual.harpe.io/start/manual/suppliers/overview.md): Track your organisation's suppliers and their compliance.
- [Adding a Supplier](https://manual.harpe.io/start/manual/suppliers/adding-a-supplier.md)
- [Viewing a Supplier](https://manual.harpe.io/start/manual/suppliers/viewing-a-supplier.md)
- [Example Suppliers](https://manual.harpe.io/start/manual/suppliers/example-suppliers.md)
- [People](https://manual.harpe.io/start/manual/people.md): Track your employees and their training.
- [Overview](https://manual.harpe.io/start/manual/people/overview.md): Track your employees and their training.
- [Adding a Person](https://manual.harpe.io/start/manual/people/adding-a-person.md)
- [Viewing a Person](https://manual.harpe.io/start/manual/people/viewing-a-person.md)
- [Example People](https://manual.harpe.io/start/manual/people/example-people.md)
- [Risks](https://manual.harpe.io/start/manual/risks.md): Identify and mitigate risks towards your organisation's security.
- [Overview](https://manual.harpe.io/start/manual/risks/overview.md): Identify and mitigate risks towards your organisation's security.
- [Adding a Risk](https://manual.harpe.io/start/manual/risks/adding-a-risk.md)
- [Viewing a Risk](https://manual.harpe.io/start/manual/risks/viewing-a-risk.md)
- [Example Risks](https://manual.harpe.io/start/manual/risks/example-risks.md)
- [CAPA](https://manual.harpe.io/start/manual/capa.md): Corrective and Preventative Actions to solidify your organisation's security.
- [Overview](https://manual.harpe.io/start/manual/capa/overview.md): Corrective and Preventative Actions to solidify your organisation's security.
- [Adding a CAPA](https://manual.harpe.io/start/manual/capa/adding-a-capa.md)
- [Viewing a CAPA](https://manual.harpe.io/start/manual/capa/viewing-a-capa.md)
- [Example CAPAs](https://manual.harpe.io/start/manual/capa/example-capas.md)
- [Incidents](https://manual.harpe.io/start/manual/incidents.md): Track the remediation of incidents.
- [Overview](https://manual.harpe.io/start/manual/incidents/overview.md)
- [Adding an Incident](https://manual.harpe.io/start/manual/incidents/adding-an-incident.md)
- [Viewing an Incident](https://manual.harpe.io/start/manual/incidents/viewing-an-incident.md)
- [Example Incidents](https://manual.harpe.io/start/manual/incidents/example-incidents.md)
- [Docs](https://manual.harpe.io/start/manual/docs.md): Store your organisation's various documents.
- [Overview](https://manual.harpe.io/start/manual/docs/overview.md)
- [Adding a Document](https://manual.harpe.io/start/manual/docs/adding-a-document.md)
- [Viewing a Document](https://manual.harpe.io/start/manual/docs/viewing-a-document.md)
- [Example Docs](https://manual.harpe.io/start/manual/docs/example-docs.md)
- [Assess](https://manual.harpe.io/start/manual/assess.md): Assess your compliance.
- [Harpe Wizard](https://manual.harpe.io/start/manual/assess/harpe-wizard.md): Your default compliance.
- [ISO27001:2013](https://manual.harpe.io/start/manual/assess/iso27001-2013.md): The 2013 ISO27001 controls and requirements.
- [ISO27001:2022](https://manual.harpe.io/start/manual/assess/iso27001-2022.md): The updated ISO27001 standard.
- [Phishing](https://manual.harpe.io/start/manual/assess/phishing.md): Test and harden your ISMS against external attacks.
- [Training](https://manual.harpe.io/start/manual/training.md): Keep your employees in the cyber security know.
- [Security Awareness Training](https://manual.harpe.io/start/manual/training/security-awareness-training.md): Keep employees aware of common cybersecurity threats.
- [Policy and Procedure Training](https://manual.harpe.io/start/manual/training/policy-and-procedure-training.md): Keep your staff up-to-date with your internal policies and procedures.
- [Company Settings](https://manual.harpe.io/start/settings/company-settings.md): Tweak your basic company details and automations.
- [Connected Services](https://manual.harpe.io/start/settings/company-settings/connected-services.md): Link other services to Harpe.
- [Targets to monitor](https://manual.harpe.io/start/settings/company-settings/targets-to-monitor.md): Customised security alerts.
- [Automations](https://manual.harpe.io/start/settings/company-settings/automations.md): Automate your tasks.
- [Overview](https://manual.harpe.io/start/iso27001-2013-wiki/overview.md)
- [The Clauses](https://manual.harpe.io/start/iso27001-2013-wiki/the-clauses.md)
- [Clause 4 - Context of the Organisation](https://manual.harpe.io/start/iso27001-2013-wiki/the-clauses/clause-4-context-of-the-organisation.md)
- [Clause 5 - Leadership](https://manual.harpe.io/start/iso27001-2013-wiki/the-clauses/clause-5-leadership.md)
- [Clause 6 - Planning](https://manual.harpe.io/start/iso27001-2013-wiki/the-clauses/clause-6-planning.md)
- [Clause 7 - Support](https://manual.harpe.io/start/iso27001-2013-wiki/the-clauses/clause-7-support.md)
- [Clause 8 - Operation](https://manual.harpe.io/start/iso27001-2013-wiki/the-clauses/clause-8-operation.md)
- [Clause 9 - Performance Evaluation](https://manual.harpe.io/start/iso27001-2013-wiki/the-clauses/clause-9-performance-evaluation.md)
- [Clause 10 - Improvement](https://manual.harpe.io/start/iso27001-2013-wiki/the-clauses/clause-10-improvement.md)
- [Annex A Controls](https://manual.harpe.io/start/iso27001-2013-wiki/annex-a-controls.md)
- [Annex A.5 - Information Security Policies](https://manual.harpe.io/start/iso27001-2013-wiki/annex-a-controls/annex-a.5-information-security-policies.md)
- [Annex A.6 - Organisation of Information Security](https://manual.harpe.io/start/iso27001-2013-wiki/annex-a-controls/annex-a.6-organisation-of-information-security.md)
- [Annex A.7 - Human Resources Security](https://manual.harpe.io/start/iso27001-2013-wiki/annex-a-controls/annex-a.7-human-resources-security.md)
- [Annex A.8 - Asset Management](https://manual.harpe.io/start/iso27001-2013-wiki/annex-a-controls/annex-a.8-asset-management.md)
- [Annex A.9 - Access Control](https://manual.harpe.io/start/iso27001-2013-wiki/annex-a-controls/annex-a.9-access-control.md)
- [Annex A.10 - Cryptography](https://manual.harpe.io/start/iso27001-2013-wiki/annex-a-controls/annex-a.10-cryptography.md)
- [Annex A.11 - Physical and Environmental Security](https://manual.harpe.io/start/iso27001-2013-wiki/annex-a-controls/annex-a.11-physical-and-environmental-security.md)
- [Annex A.12 - Operations Security](https://manual.harpe.io/start/iso27001-2013-wiki/annex-a-controls/annex-a.12-operations-security.md)
- [Annex A.13 - Communications Security](https://manual.harpe.io/start/iso27001-2013-wiki/annex-a-controls/annex-a.13-communications-security.md)
- [Annex A.14 - Systems Acquisition, Development, and Maintenance](https://manual.harpe.io/start/iso27001-2013-wiki/annex-a-controls/annex-a.14-systems-acquisition-development-and-maintenance.md)
- [Annex A.15 - Supplier Relationships](https://manual.harpe.io/start/iso27001-2013-wiki/annex-a-controls/annex-a.15-supplier-relationships.md)
- [Annex A.16 - Information Security Incident Management](https://manual.harpe.io/start/iso27001-2013-wiki/annex-a-controls/annex-a.16-information-security-incident-management.md)
- [Annex A.17 - Information Security Aspects of Business Continuity](https://manual.harpe.io/start/iso27001-2013-wiki/annex-a-controls/annex-a.17-information-security-aspects-of-business-continuity.md)
- [Annex A.18 - Compliance](https://manual.harpe.io/start/iso27001-2013-wiki/annex-a-controls/annex-a.18-compliance.md)
- [Overview](https://manual.harpe.io/start/iso27001-2022-wiki/overview.md)
- [Annex A Controls](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls.md)
- [Annex A.5 - Organisational Controls](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls.md)
- [Annex A 5.1 - Policies for Information Security](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.1-policies-for-information-security.md)
- [Annex A 5.2 - Information Security Roles and Responsibilities](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.2-information-security-roles-and-responsibilities.md)
- [Annex A 5.3 - Segregation of Duties](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.3-segregation-of-duties.md)
- [Annex A 5.4 - Management Responsibilities](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.4-management-responsibilities.md)
- [Annex A 5.5 - Contact With Authorities](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.5-contact-with-authorities.md)
- [Annex A 5.6 - Contact With Special Interest Groups](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.6-contact-with-special-interest-groups.md)
- [Annex A 5.7 - Threat Intelligence](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.7-threat-intelligence.md)
- [Annex A 5.8 - Information Security in Project Management](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.8-information-security-in-project-management.md)
- [Annex A 5.9 - Inventory of Information and Other Associated Assets](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.9-inventory-of-information-and-other-associated-assets.md)
- [Annex A 5.10 - Acceptable Use of Information and Other Associated Assets](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.10-acceptable-use-of-information-and-other-associated-assets.md)
- [Annex A 5.11 - Return of Assets](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.11-return-of-assets.md)
- [Annex A 5.12 - Classification of Information](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.12-classification-of-information.md)
- [Annex A 5.13 - Labelling of Information](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.13-labelling-of-information.md)
- [Annex A 5.14 - Information Transfer](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.14-information-transfer.md)
- [Annex A 5.15 - Access Control](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.15-access-control.md)
- [Annex A 5.16 - Identity Management](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.16-identity-management.md)
- [Annex A 5.17 - Authentication Information](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.17-authentication-information.md)
- [Annex A 5.18 - Access Rights](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.18-access-rights.md)
- [Annex A 5.19 - Information Security in Supplier Relationships](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.19-information-security-in-supplier-relationships.md)
- [Annex A 5.20 - Addressing Information Security Within Supplier Agreements](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.20-addressing-information-security-within-supplier-agreements.md)
- [Annex A 5.21 - Managing Information Security in the ICT Supply Chain](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.21-managing-information-security-in-the-ict-supply-chain.md)
- [Annex A 5.22 - Monitoring, Review and Change Management of Supplier Services](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.22-monitoring-review-and-change-management-of-supplier-services.md)
- [Annex A 5.23 - Information Security for Use of Cloud Services](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.23-information-security-for-use-of-cloud-services.md)
- [Annex A 5.24 - Information Security Incident Management Planning and Preparation](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.24-information-security-incident-management-planning-and-preparation.md)
- [Annex A 5.25 - Assessment and Decision on Information Security Events](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.25-assessment-and-decision-on-information-security-events.md)
- [Annex A 5.26 - Response to Information Security Incidents](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.26-response-to-information-security-incidents.md)
- [Annex A 5.27 - Learning From Information Security Incidents](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.27-learning-from-information-security-incidents.md)
- [Annex A 5.28 - Collection of Evidence](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.28-collection-of-evidence.md)
- [Annex A 5.29 - Information Security During Disruption](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.29-information-security-during-disruption.md)
- [Annex A 5.30 - ICT Readiness for Business Continuity](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.30-ict-readiness-for-business-continuity.md)
- [Annex A 5.31 - Legal, Statutory, Regulatory and Contractual Requirements](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.31-legal-statutory-regulatory-and-contractual-requirements.md)
- [Annex A 5.32 - Intellectual Property Rights](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.32-intellectual-property-rights.md)
- [Annex A 5.33 - Protection of Records](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.33-protection-of-records.md)
- [Annex A 5.34 - Privacy and Protection of PII](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.34-privacy-and-protection-of-pii.md)
- [Annex A 5.35 - Independent Review of Information Security](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.35-independent-review-of-information-security.md)
- [Annex A 5.36 - Compliance With Policies, Rules and Standards for Information Security](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.36-compliance-with-policies-rules-and-standards-for-information-security.md)
- [Annex A 5.37 - Documented Operating Procedures](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.5-organisational-controls/annex-a-5.37-documented-operating-procedures.md)
- [Annex A.6 - People Controls](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.6-people-controls.md)
- [Annex A 6.1 - Screening](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.6-people-controls/annex-a-6.1-screening.md)
- [Annex A 6.2 - Terms and Conditions of Employment](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.6-people-controls/annex-a-6.2-terms-and-conditions-of-employment.md)
- [Annex A 6.3 - Information Security Awareness, Education and Training](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.6-people-controls/annex-a-6.3-information-security-awareness-education-and-training.md)
- [Annex A 6.4 - Disciplinary Process](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.6-people-controls/annex-a-6.4-disciplinary-process.md)
- [Annex A 6.5 - Responsibilities After Termination or Change of Employment](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.6-people-controls/annex-a-6.5-responsibilities-after-termination-or-change-of-employment.md)
- [Annex A 6.6 - Confidentiality or Non-Disclosure Agreements](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.6-people-controls/annex-a-6.6-confidentiality-or-non-disclosure-agreements.md)
- [Annex A 6.7 - Remote Working](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.6-people-controls/annex-a-6.7-remote-working.md)
- [Annex A 6.8 - Information Security Event Reporting](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.6-people-controls/annex-a-6.8-information-security-event-reporting.md)
- [Annex A.7 -Physical Controls](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.7-physical-controls.md)
- [Annex A 7.1 - Physical Security Perimeters](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.7-physical-controls/annex-a-7.1-physical-security-perimeters.md)
- [Annex A 7.2 - Physical Entry](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.7-physical-controls/annex-a-7.2-physical-entry.md)
- [Annex A 7.3 - Securing Offices, Rooms and Facilities](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.7-physical-controls/annex-a-7.3-securing-offices-rooms-and-facilities.md)
- [Annex A 7.4 - Physical Security Monitoring](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.7-physical-controls/annex-a-7.4-physical-security-monitoring.md)
- [Annex A 7.5 - Protecting Against Physical and Environmental Threats](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.7-physical-controls/annex-a-7.5-protecting-against-physical-and-environmental-threats.md)
- [Annex A 7.6 - Working In Secure Areas](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.7-physical-controls/annex-a-7.6-working-in-secure-areas.md)
- [Annex A 7.7 - Clear Desk and Clear Screen](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.7-physical-controls/annex-a-7.7-clear-desk-and-clear-screen.md)
- [Annex A 7.8 - Equipment Siting and Protection](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.7-physical-controls/annex-a-7.8-equipment-siting-and-protection.md)
- [Annex A 7.9 - Security of Assets Off-Premises](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.7-physical-controls/annex-a-7.9-security-of-assets-off-premises.md)
- [Annex A 7.10 - Storage Media](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.7-physical-controls/annex-a-7.10-storage-media.md)
- [Annex A 7.11 - Supporting Utilities](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.7-physical-controls/annex-a-7.11-supporting-utilities.md)
- [Annex A 7.12 - Cabling Security](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.7-physical-controls/annex-a-7.12-cabling-security.md)
- [Annex A 7.13 - Equipment Maintenance](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.7-physical-controls/annex-a-7.13-equipment-maintenance.md)
- [Annex A 7.14 - Secure Disposal or Re-Use of Equipment](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.7-physical-controls/annex-a-7.14-secure-disposal-or-re-use-of-equipment.md)
- [Annex A.8 - Technological Controls](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls.md)
- [Annex A 8.1 - User Endpoint Devices](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.1-user-endpoint-devices.md)
- [Annex A 8.2 - Privileged Access Rights](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.2-privileged-access-rights.md)
- [Annex A 8.3 - Information Access Restriction](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.3-information-access-restriction.md)
- [Annex A 8.4 - Access to Source Code](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.4-access-to-source-code.md)
- [Annex A 8.5 - Secure Authentication](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.5-secure-authentication.md)
- [Annex A 8.6 - Capacity Management](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.6-capacity-management.md)
- [Annex A 8.7 - Protection Against Malware](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.7-protection-against-malware.md)
- [Annex A 8.8 - Management of Technical Vulnerabilities](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.8-management-of-technical-vulnerabilities.md)
- [Annex A 8.9 - Configuration Management](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.9-configuration-management.md)
- [Annex A 8.10 - Information Deletion](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.10-information-deletion.md)
- [Annex A 8.11 - Data Masking](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.11-data-masking.md)
- [Annex A 8.12 - Data Leakage Prevention](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.12-data-leakage-prevention.md)
- [Annex A 8.13 - Information Backup](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.13-information-backup.md)
- [Annex A 8.14 - Redundancy of Information Processing Facilities](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.14-redundancy-of-information-processing-facilities.md)
- [Annex A 8.15 - Logging](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.15-logging.md)
- [Annex A 8.16 - Monitoring Activities](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.16-monitoring-activities.md)
- [Annex A 8.17 - Clock Synchronization](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.17-clock-synchronization.md)
- [Annex A 8.18 - Use of Privileged Utility Programs](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.18-use-of-privileged-utility-programs.md)
- [Annex A 8.19 - Installation of Software on Operational Systems](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.19-installation-of-software-on-operational-systems.md)
- [Annex A 8.20 - Networks Security](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.20-networks-security.md)
- [Annex A 8.21 - Security of Network Services](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.21-security-of-network-services.md)
- [Annex A 8.22 - Segregation of Networks](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.22-segregation-of-networks.md)
- [Annex A 8.23 - Web filtering](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.23-web-filtering.md)
- [Annex A 8.24 - Use of Cryptography](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.24-use-of-cryptography.md)
- [Annex A 8.25 - Secure Development Life Cycle](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.25-secure-development-life-cycle.md)
- [Annex A 8.26 - Application Security Requirements](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.26-application-security-requirements.md)
- [Annex A 8.27 - Secure System Architecture and Engineering Principles](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.27-secure-system-architecture-and-engineering-principles.md)
- [Annex A 8.28 - Secure Coding](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.28-secure-coding.md)
- [Annex A 8.29 - Security Testing in Development and Acceptance](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.29-security-testing-in-development-and-acceptance.md)
- [Annex A 8.30 - Outsourced Development](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.30-outsourced-development.md)
- [Annex A 8.31 - Separation of Development, Test and Production Environments](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.31-separation-of-development-test-and-production-environments.md)
- [Annex A 8.32 - Change Management](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.32-change-management.md)
- [Annex A 8.33 - Test Information](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.33-test-information.md)
- [Annex A 8.34 - Protection of Information Systems During Audit Testing](https://manual.harpe.io/start/iso27001-2022-wiki/annex-a-controls/annex-a.8-technological-controls/annex-a-8.34-protection-of-information-systems-during-audit-testing.md)
- [Overview](https://manual.harpe.io/start/cyber-essentials-wiki/overview.md)
- [Controls](https://manual.harpe.io/start/cyber-essentials-wiki/controls.md)
- [1. Firewalls](https://manual.harpe.io/start/cyber-essentials-wiki/controls/1.-firewalls.md): Secure your network boundaries.
- [2. Secure Configuration](https://manual.harpe.io/start/cyber-essentials-wiki/controls/2.-secure-configuration.md)
- [3. User Access Control](https://manual.harpe.io/start/cyber-essentials-wiki/controls/3.-user-access-control.md)
- [4. Malware Protection](https://manual.harpe.io/start/cyber-essentials-wiki/controls/4.-malware-protection.md)
- [5. Security Update Management](https://manual.harpe.io/start/cyber-essentials-wiki/controls/5.-security-update-management.md)
- [Further Guidance](https://manual.harpe.io/start/cyber-essentials-wiki/controls/further-guidance.md)
- [Backup Your Data](https://manual.harpe.io/start/cyber-essentials-wiki/controls/further-guidance/backup-your-data.md)
- [Tools](https://manual.harpe.io/start/harpe-approved/tools.md)
- [Asana](https://manual.harpe.io/start/harpe-approved/tools/asana.md): Asana system review carried out by the security experts at Harpe.
- [Confluence](https://manual.harpe.io/start/harpe-approved/tools/confluence.md): Here is the system review for Confluence carried out by the security experts at Harpe
- [Datadoghq.com](https://manual.harpe.io/start/harpe-approved/tools/datadoghq.com.md): Here is the system review for Datadoghq.com carried out by the security experts at Harpe
- [GitHub](https://manual.harpe.io/start/harpe-approved/tools/github.md): Here is the system review for Datadoghq.com carried out by the security experts at Harpe
- [Jira](https://manual.harpe.io/start/harpe-approved/tools/jira.md)
- [Logz.io](https://manual.harpe.io/start/harpe-approved/tools/logz.io.md): Here is the system review for Logz.io carried out by the security experts at Harpe
- [Opsgenie](https://manual.harpe.io/start/harpe-approved/tools/opsgenie.md): Here is the system review for OpsGenie carried out by the security experts at Harpe
- [Slack](https://manual.harpe.io/start/harpe-approved/tools/slack.md)
- [Trello](https://manual.harpe.io/start/harpe-approved/tools/trello.md)
- [Twilio](https://manual.harpe.io/start/harpe-approved/tools/twilio.md)
- [Suppliers](https://manual.harpe.io/start/harpe-approved/suppliers.md)
- [Acer](https://manual.harpe.io/start/harpe-approved/suppliers/acer.md): https://www.acer.com/gb-en
- [Adobe Creative Cloud](https://manual.harpe.io/start/harpe-approved/suppliers/adobe-creative-cloud.md): https://www.adobe.com/
- [AgileBits Inc](https://manual.harpe.io/start/harpe-approved/suppliers/agilebits-inc.md): https://1password.com/
- [Apple Inc.](https://manual.harpe.io/start/harpe-approved/suppliers/apple-inc..md): https://www.apple.com/uk/
- [Apptio](https://manual.harpe.io/start/harpe-approved/suppliers/apptio.md): https://www.apptio.com/
- [Atlassian](https://manual.harpe.io/start/harpe-approved/suppliers/atlassian.md): https://www.atlassian.com/
- [AWS](https://manual.harpe.io/start/harpe-approved/suppliers/aws.md): https://aws.amazon.com/
- [BILL](https://manual.harpe.io/start/harpe-approved/suppliers/bill.md): https://www.bill.com/
- [Block](https://manual.harpe.io/start/harpe-approved/suppliers/block.md): https://block.xyz/
- [Box](https://manual.harpe.io/start/harpe-approved/suppliers/box.md): https://www.box.com/
- [Chargebee](https://manual.harpe.io/start/harpe-approved/suppliers/chargebee.md): https://www.chargebee.com/
- [Datadog](https://manual.harpe.io/start/harpe-approved/suppliers/datadog.md): https://www.datadoghq.com/
- [Dell Technologies](https://manual.harpe.io/start/harpe-approved/suppliers/dell-technologies.md): https://www.dell.com/en-uk
- [Densify](https://manual.harpe.io/start/harpe-approved/suppliers/densify.md): https://www.densify.com/
- [DocuSign](https://manual.harpe.io/start/harpe-approved/suppliers/docusign.md): https://www.docusign.com/
- [Duffel](https://manual.harpe.io/start/harpe-approved/suppliers/duffel.md): https://duffel.com/
- [EMIS Health](https://manual.harpe.io/start/harpe-approved/suppliers/emis-health.md): https://emishealth.com/
- [Epignosis](https://manual.harpe.io/start/harpe-approved/suppliers/epignosis.md): https://www.epignosishq.com/
- [ESET](https://manual.harpe.io/start/harpe-approved/suppliers/eset.md): https://www.eset.com/
- [E-Sign](https://manual.harpe.io/start/harpe-approved/suppliers/e-sign.md): https://www.esign.co.uk/
- [GitLab](https://manual.harpe.io/start/harpe-approved/suppliers/gitlab.md): https://about.gitlab.com/
- [Google](https://manual.harpe.io/start/harpe-approved/suppliers/google.md): https://workspace.google.com/
- [Gremlin](https://manual.harpe.io/start/harpe-approved/suppliers/gremlin.md): https://www.gremlin.com/
- [Guidewire](https://manual.harpe.io/start/harpe-approved/suppliers/guidewire.md): https://www.guidewire.com/
- [Gusto](https://manual.harpe.io/start/harpe-approved/suppliers/gusto.md): https://gusto.com/
- [HP (Hewlett - Packard)](https://manual.harpe.io/start/harpe-approved/suppliers/hp-hewlett-packard.md): https://www.hp.com/gb-en/home.html
- [HSO](https://manual.harpe.io/start/harpe-approved/suppliers/hso.md): https://www.hso.com/
- [HubSpot](https://manual.harpe.io/start/harpe-approved/suppliers/hubspot.md): https://hubspot.com/
- [IASME](https://manual.harpe.io/start/harpe-approved/suppliers/iasme.md): https://iasme.co.uk/
- [Intuit](https://manual.harpe.io/start/harpe-approved/suppliers/intuit.md): https://www.intuit.com/
- [JetBrains](https://manual.harpe.io/start/harpe-approved/suppliers/jetbrains.md): https://www.jetbrains.com/
- [Lenovo](https://manual.harpe.io/start/harpe-approved/suppliers/lenovo.md): https://www.lenovo.com/gb/en/pc/?orgRef=https%253A%252F%252Fwww.google.com%252F
- [Logz.io](https://manual.harpe.io/start/harpe-approved/suppliers/logz.io.md): https://logz.io/
- [Lucid Software Inc](https://manual.harpe.io/start/harpe-approved/suppliers/lucid-software-inc.md): https://www.lucidchart.com/pages
- [Meta Platforms Inc](https://manual.harpe.io/start/harpe-approved/suppliers/meta-platforms-inc.md): https://about.meta.com/
- [Microsoft](https://manual.harpe.io/start/harpe-approved/suppliers/microsoft.md): https://www.microsoft.com/
- [MongoDB Atlas](https://manual.harpe.io/start/harpe-approved/suppliers/mongodb-atlas.md): https://www.mongodb.com/
- [New Relic](https://manual.harpe.io/start/harpe-approved/suppliers/new-relic.md): https://newrelic.com/
- [Obsidian.md](https://manual.harpe.io/start/harpe-approved/suppliers/obsidian-md.md): https://obsidian.md/
- [Paycom](https://manual.harpe.io/start/harpe-approved/suppliers/paycom.md): https://www.paycom.com/
- [Periculo](https://manual.harpe.io/start/harpe-approved/suppliers/periculo.md): https://www.periculo.co.uk/
- [Process Street](https://manual.harpe.io/start/harpe-approved/suppliers/process-street.md): https://www.process.st/
- [Qualtrics](https://manual.harpe.io/start/harpe-approved/suppliers/qualtrics.md): https://www.qualtrics.com/
- [Salesforce](https://manual.harpe.io/start/harpe-approved/suppliers/salesforce.md): https://www.salesforce.com/
- [ServiceNow](https://manual.harpe.io/start/harpe-approved/suppliers/servicenow.md): https://www.servicenow.com/
- [Shopify](https://manual.harpe.io/start/harpe-approved/suppliers/shopify.md): https://www.shopify.com/
- [Slack](https://manual.harpe.io/start/harpe-approved/suppliers/slack.md): https://www.slack.com/
- [Smartsheet](https://manual.harpe.io/start/harpe-approved/suppliers/smartsheet.md): https://www.smartsheet.com/
- [SolarWinds](https://manual.harpe.io/start/harpe-approved/suppliers/solarwinds.md): https://www.solarwinds.com/
- [Spendesk](https://manual.harpe.io/start/harpe-approved/suppliers/spendesk.md): https://www.spendesk.com/
- [Splunk](https://manual.harpe.io/start/harpe-approved/suppliers/splunk.md): https://www.splunk.com/
- [Stripe](https://manual.harpe.io/start/harpe-approved/suppliers/stripe.md)
- [Tenable](https://manual.harpe.io/start/harpe-approved/suppliers/tenable.md): https://www.tenable.com/
- [Toshiba](https://manual.harpe.io/start/harpe-approved/suppliers/toshiba.md): https://www.toshiba.co.uk/
- [Twilio](https://manual.harpe.io/start/harpe-approved/suppliers/twilio.md): https://www.twilio.com/
- [Uber](https://manual.harpe.io/start/harpe-approved/suppliers/uber.md): https://www.uber.com/
- [Upwork](https://manual.harpe.io/start/harpe-approved/suppliers/upwork.md): https://www.upwork.com/en-gb/
- [Webflow](https://manual.harpe.io/start/harpe-approved/suppliers/webflow.md): https://webflow.com/
- [Workday](https://manual.harpe.io/start/harpe-approved/suppliers/workday.md): https://www.workday.com/
- [Workiva](https://manual.harpe.io/start/harpe-approved/suppliers/workiva.md): https://www.workiva.com/
- [Xero](https://manual.harpe.io/start/harpe-approved/suppliers/xero.md): https://www.xero.com/
- [Zendesk](https://manual.harpe.io/start/harpe-approved/suppliers/zendesk.md): https://www.zendesk.co.uk/
- [ZipRecruiter](https://manual.harpe.io/start/harpe-approved/suppliers/ziprecruiter.md): https://www.ziprecruiter.com/
- [Zoom](https://manual.harpe.io/start/harpe-approved/suppliers/zoom.md): https://zoom.us/
- [Payments and refunds](https://manual.harpe.io/start/payments-and-refunds.md): We do not have a refund policy in place, once you pay it is non refundable.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on a page URL with the `ask` query parameter:
```
GET https://manual.harpe.io/start/introduction.md?ask=<question>
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.