Restricted artefacts include policies, risk assessments, ISMS records, and insurance schedules. They are made available to approved auditors, prospective partners, and validators under a non-disclosure agreement.
To request access, contact the Director with the engagement context and the artefacts in scope; access is provisioned within one working day.