+DER.3.2.A22 Following Up on an IS Audit (S)

DER.3.2.A22 Following Up on an IS Audit (S)

The deviations identified in the IS audit report SHOULD be corrected by the CISO within a reasonable period of time. The corrective measures to be performed SHOULD be documented along with the respective responsibilities, dates of implementation, and status. The implementation SHOULD be followed up on continuously and the implementation status updated.

The necessity of additional IS audits SHOULD be checked as a matter of principle. The person in charge of the IS audit SHOULD adapt both the rough and detailed plans for the IS audit.

1. Prezentare generală

1.1 Referințe

1.2 Cerințe identificate

1.3 Reglementări asociate

2. Cerințe identificate

Cerințe

3. Reglementări asociate

Reglementări

Tichete legate

Legături
blocks G 0.18 Poor Planning or Lack of Adaptation