Investigate root cause
TSK-0996
-
Last updated
Open
Owner
Sam de VriesAssignee
Sam de VriesCreated by
Sam de VriesDue
11/1/2026Source
Root cause investigationAbout this Finding
FND-011 — The Statement of Applicability is thin on the reasons for including three controlsThe lead auditor of the Stage 1 audit read the Statement of Applicability and found that three controls are marked as included without a reason that a reader can follow. The text names the control and the Risk, but not why the control is needed in this organisation. Stage 2 will test the Statement against the Risk treatment, so the reasons must be complete by then.
Root cause investigation
Due soonDue 11/1/2026 — open the step when ready.