Implement corrective action
TSK-0999
-
Last updated
Open
Owner
Sam de VriesAssignee
Thijs BosmanCreated by
Sam de VriesDue
11/22/2026Source
Corrective actionAbout this Finding
FND-013 — The internal audit programme does not yet cover the CbwThe internal audit programme covers the clauses of ISO 27001 and the Policies of the ISMS, but the Cbw is not yet part of it. Tidewell IT adopted the Cbw as a framework after the first audit cycle was planned. The lead auditor expects the programme to show when the Cbw requirements will be audited and by whom, before the Stage 2 audit takes place.
Corrective action
Due soonDue 11/22/2026 — open the step when ready.