Signup and login personal data flow

An ISMS-P personal data flow across a DMZ, internal network, external identity provider, and service provider

A signup and login personal data flow for preparing an ISMS-P 1.2.2 review. Boundaries and mappings show the path from collection through internal storage and authentication logs to external identity verification and email delivery.

Things to try

• Inspect boundary types and descriptions to distinguish the internal network, DMZ, and external zones.
• Start a trace from the email field to follow its storage and transfer to a service provider.
• Review the transform mapping in the masking process and the fields stored in authentication logs.