+DER.3.1.A7 Drawing Up an Audit Program (S)

DER.3.1.A7 Drawing Up an Audit Program (S)

The CISO SHOULD draw up an audit program that contains all the audits and revisions to be performed in the next several years. Objectives SHOULD be defined for the audit program that are derived in particular from the information security goals at hand and the aims of the corresponding organisation.

The CISO SHOULD provide for contingency reserves in the organisation's annual resource planning. The audit program SHOULD be subject to its own continuous improvement process.

1. Επισκόπηση

1.1 Παραπομπές

1.2 Εντοπισμένες απαιτήσεις

1.3 Σχετικοί κανονισμοί

2. Εντοπισμένες απαιτήσεις

Απαιτήσεις

3. Σχετικοί κανονισμοί

Κανονισμοί

Συνδεδεμένα ζητήματα

Συνδέσεις
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.29 Violations of Laws or Regulations
blocks G 0.46 Loss of Integrity of Sensitive Information