Hold up, is this a trick question? I'm going with B and D, but only if the correct answers come with a complimentary fridge magnet that says 'I caught the issue' on it.
A and C, all the way! Attestation results and policy exceptions are the real deal. It's like trying to hide a T-Rex in your backpack - you can't ignore those big issues!
Hmm, I'd have to go with B and D. Failed indicators and untested controls? That's a recipe for disaster! We need to be on top of those like a cat on a laser pointer.
I'd say C and D are the way to go. Policy exceptions and unfinished control tests are just as important to track. Gotta keep those auditors happy, you know?
I agree with Willow, because if the attestation result is not implemented or the indicator result is failed, then an issue should be created automatically.
A and B, of course! Automatic issue creation is a must-have for keeping our security in check. Wouldn't want any 'Not Implemented' or 'Failed' issues slipping through the cracks!
Clarence
3 months agoAnika
2 months agoErick
2 months agoBethanie
2 months agoAlysa
3 months agoArminda
3 months agoDona
3 months agoVeronique
3 months agoCassie
3 months agoFrancesco
3 months agoArlene
3 months agoJuliann
4 months agoJolanda
4 months agoWillow
4 months agoKaran
5 months agoPamella
3 months agoLouvenia
3 months agoMalissa
4 months agoYvonne
4 months ago