Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Having gone through quite a number of compliance audits... the one thing that is good in that advice, is that many items in an audit are just a checklist of questions, such as

do you have a policy for XYZ?

or confirm you have a process for "thing"

So what ends up happeneing is if you feel stressed about an audit, just getting a list of the audit, you will realize how much you can just say "yes" to and feel less daunted by the audit.

So, its a good self-check even if youre just crossing out the things you should have already have a framework for.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: