Kickoff follow-up and security review next steps

Hello Shona, hello Gordon, Thanks both for your time on the kickoff call. A quick summary so we are all working from the same page. - The brain will be built and run inside Kenmure's own Snowflake account, so nothing leaves your environment. - First sources to connect: the CRM, the helpdesk and the accounting system, so account management, provisioning and the service desk see each customer in one place. - Gordon, you asked for the security review pack and how SSO and SCIM will be set up for the licensed users. I'll cover both in the review support that comes with Enterprise. Gordon, could you tell me which questions your team needs answered before any connector goes live? If you have a standard questionnaire, send it over and I'll work through it. Shona, nothing needed from you this week beyond confirming who should be the day-to-day admin contact. Kind regards, Laura Implementation Consultant, BB-Demo

Laura, Thanks for the summary. Our questionnaire is attached, though it is the generic one and some of it will not apply. Three things I need before I am comfortable with any connector going live: - confirmation of exactly which roles in our Snowflake account the brain will use, and what they can read and write - how access is logged, and whether we can see that log ourselves - how SCIM deprovisioning works when someone leaves the company I would rather we settled these first and connected afterwards, not the other way round. Regards, Gordon McInnes Head of Information Security, Kenmure Business Telecom

Hello Gordon, hello Shona, Gordon, thank you for the questionnaire and the three points. Answers in the same order: - Roles: I have written up the roles and grants the brain needs in your Snowflake account, read access on the source schemas and write access only to its own schema. The document is attached for you to mark up. - Logging: access is recorded and you can see it in your own account, as it is yours. - SCIM: deprovisioning follows your identity provider, so a leaver loses access when you remove them there. I'll walk you through it on screen if that is easier. I have also filled in the parts of the questionnaire that apply and left a note against the ones that do not. Shona, for your side, no connector will be switched on until Gordon has signed off the roles. That should not slow the plan down much. Could you both let me know a time next week for a short call to close this out? Kind regards, Laura