+DER.3.2.A21 Creation of an IS Audit Report [IS Audit Team] (S)

DER.3.2.A21 Creation of an IS Audit Report [IS Audit Team] (S)

The IS Audit Team SHOULD transfer the results obtained into an IS audit report and document them transparently. A draft version of the report SHOULD be sent in advance to the audited organisation. It SHOULD be verified whether the issues established by the IS Audit Team were correctly recorded.

The audited organisation SHOULD ensure that all affected entities within the organisation are provided with the sections of the IS audit report that are important and necessary for them within an appropriate time frame. In particular, the contents SHOULD be communicated to the Top Management, the person in charge of the IS audit, and the CISO.

IS audit reports SHOULD be assigned an appropriate confidentiality rating based on the sensitive information they contain.

The possibility of having the IS Audit Team provide the results of the IS audit to the Top Management in the form of a presentation SHOULD be considered.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.29 Violations of Laws or Regulations
blocks G 0.46 Loss of Integrity of Sensitive Information