ISAE 3402 - Assurance Reports on Controls at a Service Organisation
Evidence on the description, the design and the operating effectiveness of controls (21 to 29) – ISAE 3402 - Assurance Reports on Controls at a Service Organisation

ISAE 3402 - Assurance Reports on Controls at a Service Organisation 3402.22: ISAE 3402 paragraph 22: Obtaining Evidence Regarding the Description

What does 3402.22 require?

To establish whether the system has been implemented, the service auditor combines inquiry with other procedures, among them observing, and inspecting records and other documents about, how the system works and how the controls are carried out.

Maintained by Gerard BlokdykControl text last updated

Other controls in Evidence on the description, the design and the operating effectiveness of controls (21 to 29) – ISAE 3402 - Assurance Reports on Controls at a Service Organisation

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll ISAE 3402 - Assurance Reports on Controls at a Service Organisation controls