+DER.3.2.A19 Reviewing Risk Treatment Options [IS Audit Team] (S)

DER.3.2.A19 Reviewing Risk Treatment Options [IS Audit Team] (S)

The IS Audit Team SHOULD check whether the remaining residual risks are appropriate and acceptable for the information domain at hand and whether the Top Management has officially acknowledged its acceptance of them in a binding manner. The IS Audit Team SHOULD randomly verify whether and to what extent the options selected to treat risks have been implemented.

1. Ħarsa ġenerali

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

Rekwiżiti

3. Regolamenti relatati

Regolamenti

Kwistjonijiet marbuta

Links
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.29 Violations of Laws or Regulations