Mapping Superset roles, row level security, authentication, export controls and logging to the access control and audit requirements auditors test.
How Superset can show ePHI only to authorized workforce members under HIPAA 164.312(a)(1) and record activity under 164.312(b): unique logins through the IdP, RLS by facility or role, automatic logoff and action logs.
Evidence Superset can give a SOC 2 auditor for CC6.1 logical access and CC6.3 role-based access: SSO-only login, mapped roles, access reviews from role exports and logs of permission changes.
Configuring Superset to support GDPR Article 25 data protection by design and default and Article 32 security of processing: datasets without unneeded personal data, RLS, export restrictions and access logs.
Keeping cardholder data out of reach in Superset under PCI DSS Requirement 7.2 access by job function and 3.4 PAN display restrictions: masked datasets, role design and logging under 10.2.
Mapping Superset roles, RLS and dashboard access to ISO/IEC 27001 Annex A controls A.8.3 information access restriction, A.5.15 access control and A.8.11 data masking.
How Superset configuration supports NIST SP 800-53 AC-3 access enforcement, AC-6 least privilege and AU-2 event logging for analytics on federal or regulated data.
Running Superset dashboards on controlled unclassified information under CMMC Level 2: AC.L2-3.1.1 authorized access, AC.L2-3.1.5 least privilege and AU.L2-3.3.1 system auditing.
Treating Superset dashboards that support financial reporting as in-scope for SOX ITGCs: user provisioning and removal through the IdP, periodic access reviews and privileged access to admin roles.
How Superset access setup supports NIS2 Article 21(2)(i) access control and 21(2)(j) multi-factor authentication through the identity provider, with role reviews and logging as evidence.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.