What is the approach for successful attestation?
There are primarily four phases, and in each phase there can be several sub-phases:
Phase I – Scope determination – that part of the organisation which needs to be covered which needs control prioritization
Phase II – Gap Analysis – Degree of control implementation presently resulting in a gap summary report along with recommendations
Phase III - Implementation / measurement journey through definition of policy/procedure/documentation on one hand and the implementation of the gaps on the other;
Phase IV – Internal Audit is the process of verifying successful implementation, on one hand, and the inclusion of security principle in business lifecycle on the other.
Phase V – CPA Attestion
Total duration of each milestone can vary depending upon the complexity of the organisation. Talk or write to us at roadma@coralesecure.com to know how we can take you through a successful journey.
|
