Hold up, is this a trick question? I'm going with B and D, but only if the correct answers come with a complimentary fridge magnet that says 'I caught the issue' on it.
A and C, all the way! Attestation results and policy exceptions are the real deal. It's like trying to hide a T-Rex in your backpack - you can't ignore those big issues!
Hmm, I'd have to go with B and D. Failed indicators and untested controls? That's a recipe for disaster! We need to be on top of those like a cat on a laser pointer.
I'd say C and D are the way to go. Policy exceptions and unfinished control tests are just as important to track. Gotta keep those auditors happy, you know?
I agree with Willow, because if the attestation result is not implemented or the indicator result is failed, then an issue should be created automatically.
A and B, of course! Automatic issue creation is a must-have for keeping our security in check. Wouldn't want any 'Not Implemented' or 'Failed' issues slipping through the cracks!
Clarence
6 months agoAnika
5 months agoErick
5 months agoBethanie
5 months agoAlysa
6 months agoArminda
6 months agoDona
6 months agoVeronique
5 months agoCassie
5 months agoFrancesco
6 months agoArlene
6 months agoJuliann
6 months agoJolanda
6 months agoWillow
7 months agoKaran
7 months agoPamella
6 months agoLouvenia
6 months agoMalissa
6 months agoYvonne
6 months ago