What to Provide
Your organization's most recently updated organization chart.
Evidence Format
Word/PDF document, exported images in a common image file type (i.e. .jpg, .png, .pdf), Excel/.csv export from the source system
Additional Guidance
If your org is small, provide a full org chart.
If your org is large, with significant headcount devoted towards staff who are not responsible for the in-scope production systems, you can provide a partial org chart that only includes the required staff responsible for your in-scope environment.
This chart should include:
Names
Titles
Reporting lines
What system(s) used to track/create the chart
When the chart was last updated
Associated Unified Control ID | Associated Framework Control |
CTRL-545 | LCL-6 |