How to Ease Compliance with the Audit Trinity - Control (
Page 3 of 7 )
Control describes a list of checks and balances that ensures that
nothing slips through the cracks. In the case of network IDs, the
control might be a regular review, perhaps monthly or weekly, that
would include:
• IDs generated since the last review
• A cross-check to ensure appropriate authorization was obtained
• Investigation triggered by missing authorizations
Like the policy, the control process should also be documented, distributed and reviewed.
