graphgrc

SCF - CPL-01.2 - Compliance Scope

Mechanisms exist to document and validate the scope of cybersecurity & data privacy controls that are determined to meet statutory, regulatory and/or contractual compliance obligations.

Mapped framework controls

ISO 27001

• 4.3.a
• 4.3.b
• 4.3.c
• 4.3

Control questions

Does the organization document and validate the scope of cybersecurity & data privacy controls that are determined to meet statutory, regulatory and/or contractual compliance obligations?

This site is open source. Improve this page.