Requirement
"The organization’s approach to managing information security and its implementation including people, processes and technologies shall be reviewed independently at planned intervals, or when significant changes occur."[1]
Explanation
An independent security assessment is more authoritative than an internal assessment. The Lake Ridge Compliance App is a third party assessment tool and can be used to meet this requirement.
