SharePoint

Teddy connects to SharePoint with a scoped service account to read your existing documents.

What Teddy does

• Imports policies and documents from selected sites
• Pulls evidence from selected libraries
• Flags documents that are out of date

Frameworks and controls

• ISO 27001:2022: clause 7.5 Documented information, A.5.1 Policies for information security, A.5.37 Documented operating procedures
• SOC 2: CC5.3 on policies and procedures
• NIS2: Article 21(2)(a) policies on risk analysis and information system security

How it works

1. You choose the sites and libraries Teddy may read and approve the permissions.
2. Teddy imports your existing policies and maps them to the requirements they cover.
3. Documents that no longer match your systems or are overdue for review become tasks.

Access

You approve the permission list first. Access is limited to the sites you select.

Do we have to move our policies into Teddy?

No. Your documents stay in SharePoint. Teddy reads them, keeps track of reviews and shows where they are referenced.