graphgrc

SCF - AST-03.2 - Provenance

Mechanisms exist to track the origin, development, ownership, location and changes to systems, system components and associated data.

Mapped framework controls

ISO 27002

Control questions

Does the organization track the origin, development, ownership, location and changes to systems, system components and associated data?