What to Provide
For each current employee sampled, provide a job description.
The evidence should demonstrate:
Defined employee role and responsibilities
Defined security requirements for the job
Defined knowledge or experience required to perform the job
NOTE: The audit team will communicate sample selections once they have been finalized. Please refrain from attaching evidence in this ER until samples have been communicated.
Evidence Format
Word/PDF document, exported images in a common image file type (i.e. .jpg, .png, .pdf), Excel/.csv export from the source system
Associated Unified Control ID | Associated Framework Control |
CTRL-545 | LCL-8 |