List of questions
Related questions
Question 113 - CIS-RC discussion
How does GRC: Policy and Compliance Management track compliance to Authority Documents?
A.
Citations are mapped to entity-scoped controls, which are tested as compliant or non-compliant.
B.
Authority Documents are mapped to individual policies, which are either marked compliant or non-compliant.
C.
Authority Documents are mapped to control objectives and compliance is checked when controls are tested as compliant or non-compliant.
D.
Citations are mapped to control objectives, and compliance is checked when controls are tested as compliant or non-compliant.
Your answer:
0 comments
Sorted by
Leave a comment first