pri-08-testing,training&monitoring.md

SCF - PRI-08 - Testing, Training & Monitoring

Mechanisms exist to conduct cybersecurity & data privacy testing, training and monitoring activities

Mapped framework controls

GDPR

• Art 32.1
• Art 32.2

ISO 27002

• A.5.36
• A.8.8

SOC 2

• P6.5
• P8.0

Control questions

Does the organization conduct cybersecurity & data privacy testing, training and monitoring activities