No. It is evidence toward compliance. Findings cite the clause they relate to, for example ISO/IEC 29100 or GDPR Article 5, and anything that cannot be assessed from the data is marked not assessed rather than guessed.
No. It is evidence toward compliance. Findings cite the clause they relate to, for example ISO/IEC 29100 or GDPR Article 5, and anything that cannot be assessed from the data is marked not assessed rather than guessed.