7123(e)(8)—7123(e)(8)
>Control Description
Include a statement that is signed and dated by the highest-ranking auditor that certifies that they completed an independent review of the business’s cybersecurity program and information system, exercised objective and impartial judgment on all issues within the scope of the cybersecurity audit, and did not rely primarily on assertions or attestations by the business’s management.
Ask AI
Configure your API key to use AI features.