Hold up, is this a trick question? I'm going with B and D, but only if the correct answers come with a complimentary fridge magnet that says 'I caught the issue' on it.
A and C, all the way! Attestation results and policy exceptions are the real deal. It's like trying to hide a T-Rex in your backpack - you can't ignore those big issues!
Hmm, I'd have to go with B and D. Failed indicators and untested controls? That's a recipe for disaster! We need to be on top of those like a cat on a laser pointer.
I'd say C and D are the way to go. Policy exceptions and unfinished control tests are just as important to track. Gotta keep those auditors happy, you know?
I agree with Willow, because if the attestation result is not implemented or the indicator result is failed, then an issue should be created automatically.
A and B, of course! Automatic issue creation is a must-have for keeping our security in check. Wouldn't want any 'Not Implemented' or 'Failed' issues slipping through the cracks!
Clarence
10 months agoAnika
9 months agoErick
9 months agoBethanie
10 months agoAlysa
10 months agoArminda
10 months agoDona
10 months agoVeronique
10 months agoCassie
10 months agoFrancesco
10 months agoArlene
10 months agoJuliann
11 months agoJolanda
11 months agoWillow
11 months agoKaran
12 months agoPamella
10 months agoLouvenia
11 months agoMalissa
11 months agoYvonne
11 months ago