3.3.11 Perform External Verification Control Objectives
This set of control objectives addresses the development of an oversight and review plan that describes how the organisation's program controls will be monitored and assessed and of its execution, both in regards to the organisation as a whole and to the offerings.
|
Identifier |
Control Objective |
Lifecycle Phase |
|
1.09 |
Ensure that the accountability program is regularly reviewed, updated, and documented. Regularly review the status of the organisation in regards to accountability and compliance to the obligations, using internal and external audit. |
1+2 - Governance |
|
6.01 |
Regularly perform internal audits aimed at validating functionality and compliance to obligations, considering both internal and external criteria, at a frequency based on risks and sensitivity (normally yearly). |
6 - Audit and Validate |
|
6.03 |
Ensure that recommendations from previous external audits have been properly considered and dealt with. |
6 - Audit and Validate |
Download the preliminary release of the Cloud Accountability Reference Architecture and the relevant A4Cloud Toolkit.
