+DER.3.2.A22 Following Up on an IS Audit (S)

DER.3.2.A22 Following Up on an IS Audit (S)

The deviations identified in the IS audit report SHOULD be corrected by the CISO within a reasonable period of time. The corrective measures to be performed SHOULD be documented along with the respective responsibilities, dates of implementation, and status. The implementation SHOULD be followed up on continuously and the implementation status updated.

The necessity of additional IS audits SHOULD be checked as a matter of principle. The person in charge of the IS audit SHOULD adapt both the rough and detailed plans for the IS audit.

1. Forbhreathnú

1.1 Tagairtí

1.2 Ceanglais aitheanta

1.3 Rialacháin ghaolmhara

2. Ceanglais aitheanta

Ceanglais

3. Rialacháin ghaolmhara

Rialacháin

Saincheisteanna nasctha

Naisc
blocks G 0.18 Poor Planning or Lack of Adaptation