+DER.3.2.A12 Creation of a Gap Analysis Plan [IS Audit Team] (S)

DER.3.2.A12 Creation of a Gap Analysis Plan [IS Audit Team] (S)

Prior to an IS audit, the IS Audit Team SHOULD create a Gap Analysis Plan. If it is necessary to extend or otherwise adapt the planned procedures during the audit, the Gap Analysis Plan SHOULD be adapted accordingly. The Gap Analysis Plan SHOULD also be included in the final IS audit report.

During an IS partial audit, the binding audit subject list from BSI SHOULD be used as the Gap Analysis Plan.

1. Prehľad

Názov Štandard

1.1 Odkazy

1.2 Identifikované požiadavky

1.3 Súvisiace predpisy

2. Identifikované požiadavky

Požiadavky
Zdroj Požiadavka

3. Súvisiace predpisy

Predpisy
Zdroj Regulácia

Prepojené úlohy

Prepojenia
Typ prepojenia Úloha
blocks G 0.18 Poor Planning or Lack of Adaptation