Guest user Created: Dec 20, 2016 Last commented: Dec 20, 2016

Annex A18 controls in the documentation toolkit

Considering your documentation toolkit, We are missing the following: Standard – A.18 Compliance, Objective A.18.2 Information Security Review, Requirement A.18.2.1 Independent review of security policy

0 0

Assign topic to the user

Select user

Expert

Rhand Leal Dec 20, 2016

Answer: This A.18.2.1 control is covered in the toolkit by the internal audit procedure, which defines that internal auditors must be selected in such a way as to ensure objectivity and impartiality, i.e. to avoid conflict of interest, because auditors are not allowed to audit their own work.

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Dec 20, 2016

Expert Advice Community