Marque
Sign in with Google

What Marque means for the CISO

Chief Information Security Officer

Agreements, obligations and access, mapped to evidence, on a system that fails closed by design.

  • security program and policies
  • SOC 2 and compliance evidence
  • access governance
  • incident response
  • vendor risk
  • Marque's own security posture

Key takeaways

The takeaways, starters and worked examples for this seat quote real company figures, so they are shown to signed-in colleagues only. Sign in to read them.

What to ask

Starters for this seat

The same starters the Ask screen offers you, from the seat's own list and its home department. Each one is answerable from connected sources today.

Sign in to see the starters for this seat.

Runs for you

Routines for this seat

Enable any of these on the Routines page. Defaults run at 06:00 UTC; change the day and time, choose whether actions ask first, and pick email, in-app or both.

  • Quarterly access review pack

    Planned

    Named in the seat catalog; not in the routines catalog yet. Any catalog routine can be enabled for this seat today.

    Delivered by email and in-app notification once built.

Worked examples

Real questions, this week's real answers

These answers quote real company data, so they are shown to signed-in colleagues only. Sign in to read them.

Boundaries

What protects you

The rules are code, not prompt. They apply the same way to every seat.

Every department brain, tiers T0 to T3
A CXO seat reads the org brain and all eleven department brains at tiers T0 to T3. Tier T4 (executive-explicit) is deliberately excluded: those files need a named grant, seat or not.
The lens frames, it never grants
Pick your seat lens on the Ask screen and answers lead with your KPIs and end with one recommended action. Access comes from grants.json and your principal record; the lens is appended after the ACL filter.
Actions wait for your click
Jira issues and comments, Copper tasks and notes, and delegated email are actions. Each shows an approval card with its consequence before it runs, is always a create or an append, and lands in the audit log with your name.
Everything is audited
Every ask records the sources and tools it used; every denial records its reason. Unreadable grants deny, missing secrets 401, and the actions kill switch stops every write.

Other seats

Internal preview for MarketCheck staff. Not for customers.

Prepared by Marque at MarketCheckversion f422dbb