ISMS monthly meeting 9

Agenda: the internal audit results and the plan for the Findings.

Discussion: the audit raised seven Findings. Two are Major: access rights reviews were skipped for two quarters, and leavers' accounts are disabled later than the 24-hour target. Four are Minor and one is an Opportunity, to automate the leaver checklist. One penetration test Finding still waits for its effectiveness check.

Decision: Lotte van Dijk owns the two Major Findings, Vera Dijkstra owns the supplier reviews, and Hans Overbeek owns the rest. Each Finding gets a root cause analysis within two weeks.