Monitoring · The monitoring plan · Element
The independence
Who performs the testing, and their distance from the control.
The part
What it is
Testing by the control owner is self-assessment. It has some value and should not be described as assurance.
Where full independence is impractical, the honest position is to state the level rather than to imply more.
The smallest level
The attributes it carries
Each attribute is one of the framework’s shared types. What a date is, and how it is written, is defined once for the whole model — the note here says what it means in this particular place.
The other elements in the monitoring plan
The scope
Which controls are tested in this cycle.
LearnThe frequency
How often each control is tested, weighted by consequence.
Learn