graphgrc

SCF - CPL-01.1 - Non-Compliance Oversight

Mechanisms exist to document and review instances of non-compliance with statutory, regulatory and/or contractual obligations to develop appropriate risk mitigation actions.

Mapped framework controls

ISO 27001

10.2.a.1
10.2.a.2
10.2.a
10.2.b.1
10.2.b.2
10.2.b.3
10.2.b
10.2.c
10.2.d
10.2.e
10.2.f
10.2.g
10.2
9.1.a
9.1.b
9.1.c
9.1.d
9.1.e
9.1.f
9.1

Control questions

Does the organization document and review instances of non-compliance with statutory, regulatory and/or contractual obligations to develop appropriate risk mitigation actions?

This site is open source. Improve this page.