CPL-02.1 ยท Internal Audit Function

Control Description

Mechanisms exist to implement an internal audit function that is capable of providing senior organization management with insights into the appropriateness of the organization's technology and information governance processes.

Control Question
Assessment question for control validation

Does the organization implement an internal audit function that is capable of providing senior organization management with insights into the appropriateness of its technology and information governance processes?

Control Weighting
5
Validation Cadence
Annual
NIST CSF Function
Detect
Supply Chain Risk Management (SCRM) Tiers
Applicable SCRM tier levels for this control
Tier 2 - Operational
Core Control Designations
Special designations and baseline inclusions
MAD: CPL-02.1
ESP Level 2: CPL-02.1
ESP Level 3: CPL-02.1
Additional Metadata
Applicability (Process):
x
Errata & Additional Notes

- updated mapping ISO 42001:2023