Description

A compliance management system comprises of the compliance program and the audit function. IT compliance program encapsulates the policies, procedures and training. Audit functions are deployed as a monitor to check for compliance on a regular basis. There are independent audit groups that conduct external compliance audits. In this way unbiased judgment on the actual compliance state can be known. Internal audit groups need to coordinate with external agencies to plan for these kinds of audits on a half yearly basis.