cys403 Security risk management , activity policy

Class Activity: Policy Checking (Auditing) You as a Lead Auditor (Policy Review Board), have been assigned a task to check the policy created by the policy maker before sending to higher management for approval. You need to check thoroughly with the ISO27001/ISO27002 standard. Prepare a report for all the “C = Conformity” and “NC- Non-Conformity” for the procedure provided in the policy. You can use the table below for auditing: Policy Name: Organization: Policy Auditor (Lead Implementor): No Task 1 Password Management System 2 Screening Description: ISO27001/ISO27002 enforce the use of individual user IDs and passwords to maintain accountability All candidates for employment, including contractors and thirdparty users, must undergo background verification checks in accordance with the appropriate laws. The screening must include verification Description Organization Policy xxx Status xxxxx C NC