Customers, certification auditors, regulators, insurers and buyers each ask about a company's security in their own words. This chapter shows that they ask for the same small set of records, such as an access review or a signed software release. A company that produces these records as part of its normal work can answer each new request from what it already has.
Read it on keibisoft.com: One set of security records for customers, auditors and regulators
Part of the series Building a security program for a growing company.
Top comments (0)