7122(b)—7122(b)
>Control Description
The business must make available to the auditor all information in the business’s possession, custody, or control that the auditor requests as relevant to the cybersecurity audit (e.g., information about the business’s cybersecurity program and information system and the business’s use of service providers or contractors). For example, the auditor may request information to determine the scope of the cybersecurity audit and the criteria the cybersecurity audit will use.
Ask AI
Configure your API key to use AI features.