Communication Center

I am evaluating control CC2.2 (Security Awareness Training & Policies). I have successfully scanned your compliance portal but could not locate the "Acceptable Use Policy" required for evidence.

Could you please guide me to where this document is stored, or upload it here so I can parse it and attach it to the SOC2 report?

During my daily scan, I found that the IAM user john.doe has not logged in for 120 days. This account holds AdministratorAccess.

Proposed Action: I am requesting permission to attach a DenyAll policy to this user pending review. I will also generate an incident finding.