The Post-Login Gap Audit
15 questions for security, operations, and compliance leaders.
Authentication verifies the credential. This audit measures what verifies the operator across every authenticated session — internal employees, contractors, and outsourced teams.
A SecureAuth specialist will map your environment in a 30-minute session.
- 1.Mark Yes or No for each question.
- 2.Count your Yes answers across all 15.
- 3.Match your total to the score guide.
Operator Presence
Can you confirm in real time that the credentialed operator is the person at the workstation?
When an operator steps away, does the session lock automatically within seconds?
When the operator returns, can the session resume without re-authentication?
If a second person appears in the camera view, does the screen lock or alert?
Can you produce continuous operator-presence evidence for any session in the last 30 days?
Visual Exfiltration
If a remote operator pointed a phone camera at the screen, would any control detect it?
Can you block screenshots and screen recording at the session level, regardless of OS?
Are screen-sharing apps restricted during sessions handling regulated data?
Do sensitive screens carry dynamic watermarks tied to the operator and session?
Session Policy
Do access policies keep evaluating risk after the session is authenticated?
If a session is taken over after login, can your stack detect it before data leaves?
Do application-level restrictions stay enforced for the full session?
Audit & Workforce Coverage
Can your logs name the operator at the screen during a specific transaction?
For insider investigations, can you retrieve continuous presence records beyond login and logout?
Do the same controls cover your in-house staff, contractors, and outsourced agents?
We'll map your gap to specific control coverage.