Search documentation

Overview Accepting residual risk with an owner, expiry and review. Documentation status This article is a concise reference. A fully exp…

…l responsible for the information security program. Perform a written risk assessment covering the confidentiality, integrity and availability of customer information. Design and i…

…Category Summary Administrative Governance of the security program: risk analysis, workforce training, access authorization, contingency planning and business associate oversight…

Overview How evidence quality, freshness and source produce the confidence score. Documentation status This article is a concise reference. A fully expanded…

…class, site or environment EXCEPTION A documented, owned, time-bound risk acceptance overrides the raw evaluation How states change States change automatically as new evidence…

…asset class, or environment EXCEPTION A documented, owned, time-bound risk acceptance overrides the raw evaluation Why EVIDENCE GAP is not FAIL EVIDENCE GAP means AssurIQ has…