+DER.3.2.A9 Integration into the Information Security Process (S)

DER.3.2.A9 Integration into the Information Security Process (S)

The Chief Information Security Officer SHOULD ensure that IS audits based on IT-Grundschutz form part of their organisation's security process. Furthermore, the results of IS audits SHOULD be incorporated back into the improvement of the ISMS at hand.

In addition, the results of IS audits and activities to remedy deficiencies and improve quality SHOULD be included in the CISO's regular report to the organisation's Top Management.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.18 Poor Planning or Lack of Adaptation