Independent review of information security
A.5.35
-
Last updated
Applicable
Catalog reference
Independently review the organisation's approach to managing information security and its implementation at planned intervals or after significant changes.
Narrative — how we satisfy this requirement
The Internal Auditor carries out the internal audits, and an outside certification body is lined up for the first certification audit.
Code
Title
Status
No risks are linked to this requirement. Link from a risk's Edit page.