CSA
CCSK · Question #148
Identified issues, risks, and recommended remediations are included when determining compliance.
The correct answer is A. True. Audits and assessments are mechanisms to document compliance with internal or external requirements (or identify deficiencies). Reporting needs to include a compliance determination, as well as a list of identified issues, risks, and remediation recommendations.
Auditing
Question
Identified issues, risks, and recommended remediations are included when determining compliance.
Options
- ATrue
- BFalse
How the community answered
(22 responses)- A82% (18)
- B18% (4)
Explanation
Audits and assessments are mechanisms to document compliance with internal or external requirements (or identify deficiencies). Reporting needs to include a compliance determination, as well as a list of identified issues, risks, and remediation recommendations.
Topics
#compliance#audit findings#risk assessment#remediation
Community Discussion
No community discussion yet for this question.