Public

1 day CAV audit

Date Auditor Time Area/process Clause

09:00 Opening Meeting
09:15 Business ISMS Updates – IS context, background
Interested parties policies, scope
09:45 Risk Assessment – Local Risk Assessment Clauses
Information Security Risk Treatment and 6-8
Statement of Applicability
10:30 Break
10:45 Local performance evaluation - monitoring, Clauses
measurement and analysis, internal audits, input 9-10
to management review
11:45 Information Security Incident Management A.16
12:30 Lunch
13:00 Asset management (A.8) A.8
13:45 Access control (A.9) A.9
14:45 Report writing
15:30 Closing Meeting