GOV-19
Assurance
Description
Mechanisms exist to define the basis for confidence that implemented practices conform to applicable security, compliance and resilience controls, where the control implementation performs as intended.
Control Question
Does the organization define the basis for confidence that implemented practices conform to applicable security, compliance and resilience controls, where the control implementation performs as intended?
Control Metadata
Domain:
Cybersecurity & Data Protection Governance
Validation Cadence:
Annual