SG-15—Management Review
>Control Description
Theme
Type
Policy/Standard
Information Security Management Standard>Implementation Guidance
1. Conduct ISMS steering committee meeting on monthly basis or on a need-to-know basis to discuss and review the current scope (products included), audit progress, ISMS scope, risk assessment activities, control implementation, and audit results. 2. Document the attendance of each member.
>Testing Procedure
1. Validate that ISMS Steering committee meet at least annually, and inspect meeting minutes from each meeting. 2. Inspect attendees of the steering committee meeting shall be documented, and members of the information steering committee shall include relevant members from the offering's organization. 3. Each meeting shall include an discussion and review of current scope (products included), audit progress, ISMS scope, risk assessment activities, control implementation, and audit results. Included shall be action items for any audit findings.
>Audit Artifacts
>Framework Mappings
Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.
Ask AI
Configure your API key to use AI features.