Compliance

This is the Compliance demo. Every visitor shares this company, and it resets every night.

What you change here, everyone sees until the next reset. Email, payments, and the AI models are switched off.

Start your own trial
  • EU GDPR (2016)
  • ISO 27001:2022
  • NIS2
  • NIS2 Netherlands (Cbw, 2026)

Nothing found that matches the search criteria.
Start your own trial
SV
Sam de Vries
sam.devries@tidewell-it.example
Legal

Edit FND-011

Cancel
Description

The lead auditor of the Stage 1 audit read the Statement of Applicability and found that three controls are marked as included without a reason that a reader can follow. The text names the control and the Risk, but not why the control is needed in this organisation. Stage 2 will test the Statement against the Risk treatment, so the reasons must be complete by then.
    Comments on this Finding (1)

    Comments

    Lotte van Dijk ·

    I wrote down why the service desk tools are in scope, so the reasons for two of the three controls are done.

    The third one is yours, @Sam de Vries, because it follows from the risk assessment.

    Add comment

      Are you sure?

      This action cannot be reverted.

      Leave this page?

      Your changes on this form are not saved. If you leave, they are lost.