Independent review of information security
A.5.35
-
Last updated
Applicable
Catalog reference
Independently review the organisation's approach to managing information security and its implementation at planned intervals or after significant changes.
Narrative — how we satisfy this requirement
The Internal Auditor carries out the internal audits, and an outside certification body is lined up for the first certification audit.
None due within 31 days.