Hold up, is this a trick question? I'm going with B and D, but only if the correct answers come with a complimentary fridge magnet that says 'I caught the issue' on it.
A and C, all the way! Attestation results and policy exceptions are the real deal. It's like trying to hide a T-Rex in your backpack - you can't ignore those big issues!
Hmm, I'd have to go with B and D. Failed indicators and untested controls? That's a recipe for disaster! We need to be on top of those like a cat on a laser pointer.
I'd say C and D are the way to go. Policy exceptions and unfinished control tests are just as important to track. Gotta keep those auditors happy, you know?
I agree with Willow, because if the attestation result is not implemented or the indicator result is failed, then an issue should be created automatically.
A and B, of course! Automatic issue creation is a must-have for keeping our security in check. Wouldn't want any 'Not Implemented' or 'Failed' issues slipping through the cracks!
Clarence
2 months agoAnika
1 months agoErick
1 months agoBethanie
1 months agoAlysa
2 months agoArminda
2 months agoDona
2 months agoVeronique
2 months agoCassie
2 months agoFrancesco
2 months agoArlene
2 months agoJuliann
3 months agoJolanda
3 months agoWillow
3 months agoKaran
4 months agoPamella
2 months agoLouvenia
2 months agoMalissa
3 months agoYvonne
3 months ago