+Policy for planning and conducting audits

Policy for planning and conducting audits

Policies and instructions for planning and conducting audits are documented, communicated and made available in accordance with SP-01 and address the following aspects:
• Restriction to read-only access to system components in accordance with the agreed audit plan and as necessary to perform the activities;
• Activities that may result in malfunctions to the cloud service or breaches of contractual requirements are performed during scheduled maintenance windows or outside peak periods; and
• Logging and monitoring of activities.
Additonal CriteriaThe Cloud Service Provider grants its cloud customers contractually guaranteed information and audit rights.
Supplementary Information - About the Criteria-

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen