ISO 27001 support and evidence

ISO 27001 expects you to manage access, log security events and test your controls. FlowSentinel maps these requirements to live data from your HubSpot portals.

• Access control and review: every user, role and team membership across connected portals.
• Privileged access oversight: super admin and export permissions, plus missing two-step verification alerts.
• Anomaly and event logging: drift detection, data-export alerts and security alerts with timestamps.
• Audit trail: a record of every action taken inside FlowSentinel.
• Technical testing: automated regular penetration testing of the platform.

At the start of each quarter FlowSentinel opens a recertification campaign for every portal. A named reviewer checks each user and access path, records keep, change or revoke decisions, then signs off. The signed record and a CSV export are available as evidence.

1. 1Campaigns are created automatically on the first day of the quarter.
2. 2Each campaign has one named reviewer.
3. 3Reviewers record a decision for every item.
4. 4Sign-off stores the reviewer name, timestamp and decision log.
5. 5Export the evidence CSV from the campaign detail page.

FlowSentinel runs automated penetration tests against the platform every night. Findings are triaged and stored with severity and remediation status, and coverage reports show which areas have been tested over time.

• Quarterly recertification evidence CSV.
• Full audit-trail export by date, actor or portal.
• Security alert history.
• Pen-test findings and coverage reports from the system console.

FlowSentinel is software that supports your ISO 27001 programme. It is not itself ISO 27001 certified and does not grant certification to your organisation. Certification remains your responsibility; FlowSentinel makes the evidence easier to produce and maintain.