Audit & Assurance
AUD domain controls.
Audit and Assurance Policy and Procedures
Establish, document, approve, communicate, apply, evaluate and maintain audit and assurance policies and procedures.
Independent Assessments
Conduct independent audit and assurance assessments according to relevant standards at least annually.
Risk Based Planning Assessment
Perform independent audit and assurance assessments according to risk-based plans and policies.
Requirements Compliance
Verify compliance with all relevant standards, regulations, legal/contractual, and statutory requirements applicable to the audit.
Audit Management Process
Define and implement an audit management process to support audit planning, risk analysis, security control assessment, conclusion, remediation schedules, report generation, and review of past reports and supporting evidence.
Remediation
Establish, document and implement processes to apply audit findings and remediation action plans to manage risks identified.