Document Third-Party Encryption

Venkata Prasad Conversation starter

lets say I do not want to encrypt my disk. I read that we have to deactivate the monitoring. when filling the deactivation form, what manual evidence I can provide in this case?


1 comment

  • Comment author
    Shannon Idea generator Vanta Team Member Conversation starter
    • Official comment

    Hi Venkata Prasad! You'll want to ensure you provide a written explanation of your reasons for deactivating the monitoring and any procedures you will be following to help mitigate any risks associated with this change. Additionally, there is the option to provide a screenshot as part of the manual evidence, and if you still have questions, be sure to check directly with your auditor since auditor requirements tend to vary.

Please sign in to leave a comment.