+DER.3.2.A19 Reviewing Risk Treatment Options [IS Audit Team] (S)

DER.3.2.A19 Reviewing Risk Treatment Options [IS Audit Team] (S)

The IS Audit Team SHOULD check whether the remaining residual risks are appropriate and acceptable for the information domain at hand and whether the Top Management has officially acknowledged its acceptance of them in a binding manner. The IS Audit Team SHOULD randomly verify whether and to what extent the options selected to treat risks have been implemented.

1. Översikt

1.1 Referenser

1.2 Identifierade krav

1.3 Relaterade regleringar

2. Identifierade krav

Krav

3. Relaterade regleringar

Regleringar

Länkade ärenden

Länkar
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.29 Violations of Laws or Regulations