graphgrc

SCF - CPL-03 - Cybersecurity & Data Protection Assessments

Mechanisms exist to ensure managers regularly review the processes and documented procedures within their area of responsibility to adhere to appropriate cybersecurity & data protection policies, standards and other applicable requirements.

Mapped framework controls

GDPR

ISO 27001

ISO 27002

NIST 800-53

SOC 2

Control questions

Does the organization ensure managers regularly review the processes and documented procedures within their area of responsibility to adhere to appropriate cybersecurity & data protection policies, standards and other applicable requirements?