ISMS monthly meeting 9
Description
Agenda: the internal audit results and the plan for the Findings.
Discussion: the audit raised seven Findings. Two are Major: access rights reviews were skipped for two quarters, and leavers' accounts are disabled later than the 24-hour target. Four are Minor and one is an Opportunity, to automate the leaver checklist. One penetration test Finding still waits for its effectiveness check.
Decision: Lotte van Dijk owns the two Major Findings, Vera Dijkstra owns the supplier reviews, and Hans Overbeek owns the rest. Each Finding gets a root cause analysis within two weeks.
No vulnerabilities discovered during this event.