Australia IRAP - Information Security Registered Assessors Program
IRAP Policy and Procedures: assessment-conduct duties – Australia IRAP - Information Security Registered Assessors Program

Australia IRAP - Information Security Registered Assessors Program PP-4.4.11: Stop or do not start where a conflict is not mitigated

What does PP-4.4.11 require?

An assessment must not proceed if ASD advises that the proposed mitigations do not adequately address a declared conflict (4.4.11); if a real conflict arises mid-assessment the assessor must stop work until ASD has considered the updated declaration, and ASD may require disengagement, transfer to a non-conflicted assessor or cessation (4.4.13). Conflicts include influence over the system through development, documentation, mitigation advice or implementation guidance, by the assessor or a related or commonly owned party (4.4.7); failing to declare is a breach (4.4.15).

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in IRAP Policy and Procedures: assessment-conduct duties – Australia IRAP - Information Security Registered Assessors Program

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Australia IRAP - Information Security Registered Assessors Program controls