+DER.3.2.A4 Drawing Up a Plan for the IS Audit (B)

DER.3.2.A4 Drawing Up a Plan for the IS Audit (B)

If an organisation is not certified in line with ISO 27001 on the basis of IT-Grundschutz, the person in charge of its IS audit and the organisation's Top Management MUST ensure that an IS partial audit or IS cross-cutting audit is carried out at least every three years. In addition, further audits should be planned if the information domain in question is significantly changed.

The person in charge of the IS audit should draw up a rough multi-year plan for audits. This schedule SHOULD then be made more specific in a detailed one-year schedule.

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.29 Violations of Laws or Regulations