6.1.12- "R2 Assessments Only?"
The Assessed Entity must select whether they will be including all CSF security controls within the assessment or only those required for certification, along with whether Privacy controls should be included in the Assessment. – Does this need to read, “for r2 assessments only.”
1
vote
Jerrod Pickering
shared this idea