DeftTrust
sign in

Control calendar

Cadence comes from policy — it is what an auditor measures. How often a collector samples is a separate thing, shown on the Collectors page.

Status All Overdue No evidence Current Event-driven
Policy All IT-05 8 IT-03 1 IT-02 8 IS-02 9 IT-04 8 IS-11 10 IS-07 8 LEG-01 8
ControlStatusCadenceLastNext due TSCDescription
LEG-01:VM-05 No evidence Annual — — CC9.2 Annual review of all vendors; high-risk vendors reviewed quarterly manual
LEG-01:VM-08 No evidence Annual — — CC9.1 High-risk vendors: invoices, contracts and SOC reports maintained

2 controls shown.