graphgrc

SCF - CPL-02.1 - Internal Audit Function

Mechanisms exist to implement an internal audit function that is capable of providing senior organization management with insights into the appropriateness of the organization’s technology and information governance processes.

Mapped framework controls

ISO 27001

ISO 27002

Control questions

Does the organization implement an internal audit function that is capable of providing senior organization management with insights into the appropriateness of the organization’s technology and information governance processes?