1. LHS = RHS
The LHS (Description of test performed) must be equal to the RHS(TOD/TOE documentation).
2. CYA
Always Cover your Ass (CYA) when performing the TOD/TOE. Always conform to TOE sampling size. Ask yourself this question, "Am I fulfilling the control objectives?"
3. Treat Reviewers as Idiots
Always document EVERYTHING and do not assume that the person reviewing your work know everything. Chances are, he/she knows nothing. So document as comprehensively as possible.
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment