ISAE 3402
Sectors
Banking & FinanceICT Service ManagementProfessional ServicesDigital InfrastructureInsuranceTechnology
This regulation may be summarised but not reproduced. Article text is available from the official source. Official source →
Articles (10)
Scope and Governance — ApplicabilityRisk Assessment — GovernanceOperational Controls — Process RequirementsReporting and Escalation — Evidence and RecordsMonitoring and Evidence — Testing and AssuranceScope and Governance — ReportingRisk Assessment — RemediationOperational Controls — Third-Party ControlsReporting and Escalation — TrainingMonitoring and Evidence — Management Review