Document Third-Party Encryption
lets say I do not want to encrypt my disk. I read that we have to deactivate the monitoring. when filling the deactivation form, what manual evidence I can provide in this case?
lets say I do not want to encrypt my disk. I read that we have to deactivate the monitoring. when filling the deactivation form, what manual evidence I can provide in this case?
<%= block.description %>
<% } %>
Comments
1 comment
Hi Venkata Prasad! You'll want to ensure you provide a written explanation of your reasons for deactivating the monitoring and any procedures you will be following to help mitigate any risks associated with this change. Additionally, there is the option to provide a screenshot as part of the manual evidence, and if you still have questions, be sure to check directly with your auditor since auditor requirements tend to vary.
Please sign in to leave a comment.