Australia IRAP - Information Security Registered Assessors Program
Quality standard: Report quality and terminology – Australia IRAP - Information Security Registered Assessors Program

Australia IRAP - Information Security Registered Assessors Program IRAP-AR-0023: IRAP-AR-0023 Assess what is implemented, not what is planned

The assessor assesses only what is implemented, not what will be implemented, though programs of work under way may be described.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Quality standard: Report quality and terminology – Australia IRAP - Information Security Registered Assessors Program

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.