Access control
Compare the approved recipient list with the access conditions actually applied.
ISO 27001
File sharing controls for ISO 27001 reviews
Choose a recent supplier transfer and trace it from approval to access. This gives your information security team a concrete example to assess within its management system.
Start my free trial ↗7 days. Up to 5 users.
No credit card required.
No credit card required.
Trusted with valuable business data
01 / THE WORK IN PRACTICE
Define the transfer you are testing
Select a file type, department and external recipient. Identify who can approve release and which conditions the sender should apply.
Information transfer
Sample an outgoing file and identify the person who approved its release.
Cryptography
Ask how file contents are protected during transfer and storage.
Supplier relationships
Record who at the supplier owns access requests and changes of personnel.
02 / EVIDENCE YOU CAN FOLLOW
Ask for evidence with a defined scope
If supplier certification forms part of the review, check the certificate, services covered and validity dates. Assess how your own team operates the exchange separately.
EXCHANGE RECORD / ILLUSTRATIVEAssurance-Records.zip✓
Sender verifiedNamed account✓
Protection appliedAES-256 / ASR✓
Recipient authenticatedAccess checks✓
Activity recordedReviewable history✓
Claims worth questioning
Ask which service, location and dates a certification claim covers.
Contributions worth evaluating
Test whether your team can produce the evidence specified in its own policy.
03 / CONTROL, WITHOUT THE FRICTION
Run a sample through the policy
Ask a sender to issue a test package using the documented process. Compare the recipient, permissions and access period with the conditions the owner approved.
Define the scope of the route
Choose a business process, file type and external party for the review.
Write it into the transfer policy
Describe the checks staff must make before releasing a file.
Assign ownership and review
Identify who approves access and who investigates a discrepancy.
Test with a real sample
Use a test file to compare the written procedure with the recipient experience.
CUSTOMER PERSPECTIVES
All customer stories ↗“
“I would highly recommend MX to anyone looking to send and receive secure data quickly and efficiently.”
Daniel FrancisProject Engineer, Envisage Group
Read the story ↗01 / 02
04 / THE DETAILS MATTER
Record the finding and owner
If the sample reveals a gap, name the person responsible for correcting it and repeat the test. Consult ISO’s description of ISO/IEC 27001 for the scope of the standard.
EXCHANGE NOTE01 / 04
Access control
Compare the approved recipient list with the access conditions actually applied.
EXCHANGE NOTE02 / 04
Information transfer
Sample an outgoing file and identify the person who approved its release.
EXCHANGE NOTE03 / 04
Cryptography
Ask how file contents are protected during transfer and storage.
EXCHANGE NOTE04 / 04
Supplier relationships
Record who at the supplier owns access requests and changes of personnel.
Controls within a wider programme. MX can support configured file-exchange safeguards. It does not certify your organisation or establish compliance by itself. Confirm the service configuration, contractual terms and suitability for your data before deployment.
GOOD QUESTIONS. CLEAR ANSWERS.
A clearer route.
From the start.
Practical answers about iso 27001 and where MX fits.
How does MX fit this workflow?+
Apply named access, encryption, permissions and activity evidence to sensitive external transfers. These exchange controls can help support an ISO 27001-aligned information security management system when configured and governed appropriately.
Does using MX make our organisation compliant?+
No. Technical controls are part of a wider programme. Your organisation remains responsible for the applicable obligations, risk assessment, policies, permissions and contracts. Confirm any required agreements and service configuration with MX before handling regulated information.
What controls can we apply to a file exchange?+
Named-recipient access, authentication, permissions and expiry settings help define the exchange. Activity records let your team review what happened. The available configuration should be matched to your requirements.
Does MX replace our existing work tools?+
Keep creating, editing and storing files in the systems your team already uses. MX focuses on controlled handoffs, rather than background synchronisation, live co-authoring or permanent backup.
What is included in the free trial?+
Try the MX feature set for 7 days with up to 5 users. No credit card is required.
YOUR NEXT EXCHANGE STARTS HERE
Test an exchange with your team
Invite a colleague to receive a sample file, then review the access settings and activity together.
7 days freeUp to 5 usersNo credit card
- Full feature access
- Unlimited file size transfers
- Named recipients and MFA
- Custom branding and upload portals