7122(d)—7122(d)
>Control Description
No finding of any cybersecurity audit may rely primarily on assertions or attestations by the business’s management. Cybersecurity audit findings must rely primarily upon the specific evidence (including documents reviewed, sampling and testing performed, and interviews conducted) that the auditor deems appropriate.
Ask AI
Configure your API key to use AI features.