What to Provide
The most recent risk assessment (use the Risk Register feature).
This evidence should demonstrate:
Company objectives
Associated risks as they relate to those objectives
How those risks were assessed
Date the assessment was completed
Who completed the assessment
Evidence Format
Screenshots or exported images in a common image file type, such as .jpg, .png, or .pdf, or document(s) in a common document file type such as .pdf or .doc.
Associated Unified Control ID | Associated Framework Control |
CTRL-646 | LCL-18 |