The Vault
1,412 standards across 47 departments. Search is free for everyone — type it the way you'd say it.
33 standards
Technology disposal
Decommission and dispose of technology so every storage device is sanitized or destroyed, documented, and removed from asset inventory.
PMS Downtime Runbook Drills and Post-Restoration Recovery
Governs quarterly rehearsal of the property management system downtime runbook and the disciplined re-entry of manual transactions once the system is restored.
POS Downtime Recovery and Sales Reconciliation
Defines how outlets capture sales during a point-of-sale outage and reconcile every manual check back into the system after restoration.
Nightly Backup Verification and Test Restores
Establishes daily verification that nightly backups completed successfully and a monthly test restore proving the data can actually come back.
Same-Day Access Provisioning and Deprovisioning Tied to HR Status
Requires that system access is created, changed, or removed the same day an employee's HR status changes, driven by an HR-to-IT notification feed.
Quarterly Privileged Account Review
Mandates a quarterly recertification of every administrator, service, and elevated-permission account across all property systems.
PCI Network Segmentation and Card-Data Handling on the Floor
Defines the segregated payment network boundary and the absolute rules for how staff handle card data anywhere on the floor.
Phishing Incident First Response and Containment
Directs the first thirty minutes after an employee clicks a phishing link, opens a malicious attachment, or surrenders credentials.
Guest Data Subject Request Fulfillment
Governs intake, identity verification, and fulfillment of guest requests to access, correct, or delete their personal data.
Guest Wi-Fi Outage Triage and Vendor Escalation
Provides a tiered triage sequence for guest Wi-Fi failures and the escalation ladder to the network vendor and ISP with defined timeframes.
Key-Encoder and Door-Lock System Management
Governs security of key encoders, issuance of elevated key levels, lock audit capability, and door-lock system maintenance.
Payment Terminal Tamper Inspection
Requires documented periodic inspection of every payment terminal for tampering, substitution, or skimming devices.
System Interface Failure Response
Defines detection and response when interfaces between the PMS and connected systems (POS, payment gateway, key encoding, PBX) stop passing data.