+DER.3.1.A24 Conclusion of the Audit or Revision [Audit Team] (S)

DER.3.1.A24 Conclusion of the Audit or Revision [Audit Team] (S)

After the audit or revision, all the relevant documents, data storage media, and IT systems SHOULD be returned or destroyed. This SHOULD be coordinated with the audited organisation. In doing so, storage obligations resulting from legal or other binding requirements SHOULD be taken into account accordingly. Furthermore, the CISO SHOULD have all the forms of access granted to the Audit Team or revision team disabled or deleted.

There SHOULD be an agreement with the auditors or revisors as to how the results are to be handled. This SHOULD also establish that the audit results must not be forwarded to other organisations without the consent of the audited organisation.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.29 Violations of Laws or Regulations
blocks G 0.46 Loss of Integrity of Sensitive Information