+DER.3.2.A9 Integration into the Information Security Process (S)

DER.3.2.A9 Integration into the Information Security Process (S)

The Chief Information Security Officer SHOULD ensure that IS audits based on IT-Grundschutz form part of their organisation's security process. Furthermore, the results of IS audits SHOULD be incorporated back into the improvement of the ISMS at hand.

In addition, the results of IS audits and activities to remedy deficiencies and improve quality SHOULD be included in the CISO's regular report to the organisation's Top Management.

1. Pregled

1.1 Reference

1.2 Utvrđeni zahtjevi

1.3 Povezani propisi

2. Utvrđeni zahtjevi

Zahtjevi

3. Povezani propisi

Propisi

Povezani zadaci

Poveznice
blocks G 0.18 Poor Planning or Lack of Adaptation