ISAE 3402 - Assurance Reports on Controls at a Service Organisation
Evidence on the description, the design and the operating effectiveness of controls (21 to 29) – ISAE 3402 - Assurance Reports on Controls at a Service Organisation

ISAE 3402 - Assurance Reports on Controls at a Service Organisation 3402.23: ISAE 3402 paragraph 23: Obtaining Evidence Regarding Design of Controls

What does 3402.23 require?

The service auditor identifies the controls needed for the stated control objectives to be met and assesses whether those controls were suitably designed. It does so by finding the risks to the control objectives and evaluating how the controls in the description are connected to those risks.

Maintained by Gerard BlokdykControl text last updated

Other controls in Evidence on the description, the design and the operating effectiveness of controls (21 to 29) – ISAE 3402 - Assurance Reports on Controls at a Service Organisation

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll ISAE 3402 - Assurance Reports on Controls at a Service Organisation controls