Yes - Clause 9.2 of the Standard makes this requirement explicit. Remember, you must audit to assess whether your ISMS is meeting your own organisational requirements as well as the requirements of the Standard and that it is effectively implemented and maintained.
related BLog
No items found.
"
URM have carried out our PCI DSS assessments for nearly 10 years. During that time they have shown expertise and commitment in helping us reach our goals. Last year we decided to go for Cyber Essentials Plus and had no hesitation in getting URM to assess us for that.
contact US
Let us help you
Let us help you in your compliance journey by completing the form and letting us know how we can best support you.