ISMS monthly meeting 8
Description
Agenda: preparing the internal audit, its scope and the sampling.
Discussion: Sam de Vries and Joris Kamphuis conduct the audit. They propose to audit access control, supplier security, and continuity, and to sample leavers and access reviews, supplier reviews, and the continuity tests. The lost laptop Incident is closed because the disk was encrypted. The remaining penetration test Findings wait for their effectiveness checks.
Decision: the audit scope and sampling are approved. Lotte van Dijk and Hans Overbeek make the records available within two weeks.
No vulnerabilities discovered during this event.