+Policy for planning and conducting audits

Policy for planning and conducting audits

Policies and instructions for planning and conducting audits are documented, communicated and made available in accordance with SP-01 and address the following aspects:
• Restriction to read-only access to system components in accordance with the agreed audit plan and as necessary to perform the activities;
• Activities that may result in malfunctions to the cloud service or breaches of contractual requirements are performed during scheduled maintenance windows or outside peak periods; and
• Logging and monitoring of activities.
Additonal CriteriaThe Cloud Service Provider grants its cloud customers contractually guaranteed information and audit rights.
Supplementary Information - About the Criteria-

1. Pregled

1.1 Sklici

1.2 Ugotovljene zahteve

1.3 Povezani predpisi

2. Ugotovljene zahteve

Zahteve

3. Povezani predpisi

Predpisi