Hold up, is this a trick question? I'm going with B and D, but only if the correct answers come with a complimentary fridge magnet that says 'I caught the issue' on it.
A and C, all the way! Attestation results and policy exceptions are the real deal. It's like trying to hide a T-Rex in your backpack - you can't ignore those big issues!
Hmm, I'd have to go with B and D. Failed indicators and untested controls? That's a recipe for disaster! We need to be on top of those like a cat on a laser pointer.
I'd say C and D are the way to go. Policy exceptions and unfinished control tests are just as important to track. Gotta keep those auditors happy, you know?
I agree with Willow, because if the attestation result is not implemented or the indicator result is failed, then an issue should be created automatically.
A and B, of course! Automatic issue creation is a must-have for keeping our security in check. Wouldn't want any 'Not Implemented' or 'Failed' issues slipping through the cracks!
Clarence
7 months agoAnika
6 months agoErick
6 months agoBethanie
6 months agoAlysa
7 months agoArminda
7 months agoDona
7 months agoVeronique
6 months agoCassie
6 months agoFrancesco
6 months agoArlene
6 months agoJuliann
7 months agoJolanda
7 months agoWillow
8 months agoKaran
8 months agoPamella
7 months agoLouvenia
7 months agoMalissa
7 months agoYvonne
7 months ago