+DER.3.1.A14 Selection of Samples [Audit Team] (S)

DER.3.1.A14 Selection of Samples [Audit Team] (S)

The Audit Team SHOULD select the samples for the on-site audit in a risk-oriented manner and justify them in a comprehensible way. The selected samples SHOULD be documented. If the audit is being performed based on the target objects and requirements of an IT-Grundschutz module, these SHOULD be selected on the basis of a previously defined method. When selecting samples, the results of previous audits SHOULD be taken into consideration, as well.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.29 Violations of Laws or Regulations