+DER.3.2.A12 Creation of a Gap Analysis Plan [IS Audit Team] (S)

DER.3.2.A12 Creation of a Gap Analysis Plan [IS Audit Team] (S)

Prior to an IS audit, the IS Audit Team SHOULD create a Gap Analysis Plan. If it is necessary to extend or otherwise adapt the planned procedures during the audit, the Gap Analysis Plan SHOULD be adapted accordingly. The Gap Analysis Plan SHOULD also be included in the final IS audit report.

During an IS partial audit, the binding audit subject list from BSI SHOULD be used as the Gap Analysis Plan.

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
blocks G 0.18 Poor Planning or Lack of Adaptation