Public
Activity Feed Discussions Blogs Bookmarks Files

Internal audits should be documented and it would be helpful to have a template in place.  I do like the approach to include specific positive and negative items throughout the testing process, even though it may take additional time. Also it must have the seriousness of the level of violation and/or a value identifying the level of risk. Once this occurs, action plans should be implemented and follow up to make sure it occured.

Sign In to comment