500.17(b)(1)(i)(b)—500.17(b)(1)(i)(b)
>Control Description
shall be based upon data and documentation sufficient to accurately determine and demonstrate such material compliance, including, to the extent necessary, documentation of officers, employees, representatives, outside vendors and other individuals or entities, as well as other documentation, whether in the form of reports, certifications, schedules or otherwise; or
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.