CMS-04—Customer Security Engagements
>Control Description
Organization supports customer-requested security inquiries, questionnaires, and audits:
• in accordance with customer contracts and agreements
• to facilitate due diligence prior to licensing organization products
Theme
Process
Type
Corrective
Policy/Standard
Customer Authentication Standard>Implementation Guidance
1. Establish a documented process to support customer-requested security inquiries, questionnaires, and audits: • in accordance with customer contracts and agreements • to facilitate due diligence prior to licensing organization products
>Testing Procedure
1. Validate whether a process in place to support customer-requested security inquiries, questionnaires, and audits: • in accordance with customer contracts and agreements • to facilitate due diligence prior to licensing organization products 2. Inspect a sample customer inquiry, questionnaire, or audit.
>Audit Artifacts
E-CMS-02
E-CMS-04
Ask AI
Configure your API key to use AI features.