Add some way to identify when a control is required to be sampled.
Peer the test plan requirement, is there any way within MyCSF where the assessor can note this is SAMPLED requirement, so then the client does not submit evidence that cannot be used since the control request sampling?
19
votes
nicole kramer
shared this idea
-
Craig George
commented
See this in 9.6 or later. Can we add this as a column to exported offline reports?