Personal agent tokens in the Q4 access review (ISO 27001 observation 3)

Project: Engineering
Type: Task
Status: To Do
Priority: Medium
Reporter: Mira Holm <mira.holm@acme-hq.example>
Assignee: Rafael Duarte <rafael.duarte@acme-hq.example>
Labels: securityiso-27001
Components: infrastructure
Sprint: Sprint 54
Created: 17 Sep 2026, 08:20 UTC
Updated: 17 Sep 2026, 08:20 UTC

Description

The auditor's observation: a policy for AI coding tools exists, but no record of who uses them. Claude Code and Codex reach Emargen through personal tokens; list them per person in the Q4 access review, with what each can do.

Comments (0)

No comments.