Inspect published assessment records, evidence, and documentation against the deployed source revision.
ISO/IEC 27001:2022 · Annex A · organizational
docs/governance/SECURITY-GOVERNANCE.md#3-policy-commitmentsA.5.1 Security policy governance Partial A.5.2 Assigned security accountabilities Partial A.5.3 Separation of conflicting duties Partial A.5.4 Leadership security responsibilities Partial A.5.5 Authority contact readiness Partial A.5.6 Security community contacts Partial A.5.7 Threat information handling Partial A.5.8 Security in managed projects Partial A.5.9 Asset and information inventory Partial A.5.10 Acceptable use expectations Partial A.5.11 Return of issued assets N/A A.5.12 Information classification model Partial A.5.13 Classification labels and handling Partial A.5.14 Protected information transfer Partial A.5.15 Access governance Partial A.5.16 Identity lifecycle management Partial A.5.17 Authentication secret management Partial A.5.18 Access provisioning and review Partial A.5.19 Supplier security governance Partial A.5.20 Security terms for suppliers Partial A.5.21 ICT supply-chain security Partial A.5.22 Supplier service review and change Partial A.5.23 Cloud service security governance Partial A.5.24 Incident response preparation Partial A.5.25 Security event triage Partial A.5.26 Incident response execution Partial A.5.27 Learning from incidents Partial A.5.28 Preserving investigative evidence Partial A.5.29 Secure operation during disruption Partial A.5.30 Technology continuity readiness Partial A.5.31 Legal and contractual obligations Partial A.5.32 Intellectual property safeguards Partial A.5.33 Protected business records Partial A.5.34 Privacy and personal-data safeguards Partial A.5.35 Independent security review Gap A.5.36 Compliance with security rules Partial A.5.37 Documented operating procedures Partial