Security review session: scheduling
Email thread Fenmoor Specialty Underwriting: documents · sales
Nadia Osei accepts an hour-long session and sets four topics: access control, data residency, connectors and declarable behaviour changes. She states it is fact-finding, not sign-off, and wants written answers first.
What was said
What this says
Current to 10 Oct 26Nadia Osei accepts an hour-long session and sets four topics: access control, data residency, connectors and declarable behaviour changes. She states it is fact-finding, not sign-off, and wants written answers first.
Ask: Nadia offered Tuesday afternoon or Thursday morning and listed four points. These are who at BB-Demo can reach the Snowflake account, where data is held and processed, what each connector reads and with what permissions, and any behaviour change to declare.
Customer view: Cooperative but firm that no sign-off date can be agreed until the capacity providers have seen the material.
Next: Hannah Lowe to send written answers before the session so Nadia can use the time for gaps.
The thread
Updated 9 Oct 26Messages
Hannah Lowe 24 Oct 2025 09:46Hello Nadia, Callum mentioned you'd like to walk through the security side of the brain before your capacity providers next review Fenmoor's suppliers. I'd be glad to set up a working session for that. To be precise about what I can cover: how the brain is built and run inside your own Snowflake account, how access is controlled, where the data sits, and how each connector reads from your systems. If you have a questionnaire or a list of open items from your last supplier review, please send it ahead of the session and I'll answer in writing, so you have something to put in front of an auditor rather than a verbal answer. Where I'm not certain on a point, I'll check it with a colleague on our side and put the answer in writing rather than guess on the call. Could you suggest a couple of slots next week? An hour should be enough for a first pass, and we can book a second if the questionnaire needs it. Thanks, Hannah Hannah Lowe Solutions Engineer, BB-Demo
Nadia Osei 29 Oct 2025 12:06Dear Hannah, Thank you for the offer, that is helpful. An hour next week would suit. Tuesday afternoon or Thursday morning are both open for me; either works if you can let me know which you prefer. So that the session is useful, these are the points I would like to cover: First, access control: who at BB-Demo can reach anything inside our Snowflake account, and how that access is granted and removed. Can you evidence that? Second, data residency: where the data is held and processed, in terms I can put in the questionnaire. Third, the connectors: what each one reads, and with what permissions, for the audit trail. Fourth, anything that changes how the brain behaves for our users that we should declare to the capacity providers. I would also like to be clear on one point. I will not be able to agree a sign-off date until the capacity providers have seen the pack, so for now this is a fact-finding session and not a sign-off. If you can send written answers to the above before we meet, I will review them beforehand and we can use the time for the gaps. Kind regards, Nadia