|
An Introduction To |
|
Implementing controlsOnce the controls have been selected they must be properly implemented and managed. This sounds very basic but often the effectiveness of a control is seriously reduced by the failure to monitor and manage it appropriately. The Auditor will be expecting to find evidence of good management and timely reporting and action in the case of any unexpected events. |
The Security Practitioner An Introduction to Information Security |