RM-06—Internal Audits
>Control Description
Organization establishes internal audit requirements based on the Common Controls Framework by Organization and executes audits on information systems and processes at planned intervals.
Theme
Process
Type
Detective
Policy/Standard
Risk Management Standard>Implementation Guidance
1. Ensure that the organization sets audit rules based on its Common Controls Framework and conducts audits on its information systems and processes at scheduled times
>Testing Procedure
1. Inspect internal and external audit results.
>Audit Artifacts
E-RM-10
E-RM-11
>Framework Mappings
Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.
Ask AI
Configure your API key to use AI features.