Independent review of information security
A.5.35
-
Last updated
Applicable
Catalog reference
Independently review the organisation's approach to managing information security and its implementation at planned intervals or after significant changes.
Narrative — how we satisfy this requirement
The Internal Auditor carries out the internal audits, and an outside certification body is lined up for the first certification audit.