In order to prepare for an audit, the following steps should be taken:
- 1Appoint auditors - these must be impartial of the process being audited, avoiding conflicts due to reporting lines and have the correct competencies to conduct the audit.
- Consider notice - identify who the auditee(s) are and establish contact to inform them and schedule interviews, as well as determine if a guide, observer, interpreter or any additional technical expertise is required.
- Management commitment - audits must be supported by management and buy in will aid with the availability of auditees.
Please find more information here.
related BLog
No items found.
"
Our URM QSA always consults with the aim of making compliance as straightforward as possible, and pointed us towards a way of significantly minimising and streamlining our assessment scope that neither we nor our previous PCI DSS consultancy provider had considered.
CISO at University of Surrey
contact US
Let us help you
Let us help you in your compliance journey by completing the form and letting us know how we can best support you.