+DER.3.2.A12 Creation of a Gap Analysis Plan [IS Audit Team] (S)

DER.3.2.A12 Creation of a Gap Analysis Plan [IS Audit Team] (S)

Prior to an IS audit, the IS Audit Team SHOULD create a Gap Analysis Plan. If it is necessary to extend or otherwise adapt the planned procedures during the audit, the Gap Analysis Plan SHOULD be adapted accordingly. The Gap Analysis Plan SHOULD also be included in the final IS audit report.

During an IS partial audit, the binding audit subject list from BSI SHOULD be used as the Gap Analysis Plan.

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
blocks G 0.18 Poor Planning or Lack of Adaptation