Why does the UCF not map some documents until an audit guide has been released?

When there are actual authorities assigned to audit organizations based on specific mandates, the UCF team needs to understand exactly what the auditors require to prove (or disprove) compliance. Placing the controls in the Unified Compliance Framework without the evidence information would otherwise be misleading and not in keeping with the UCF mandate.

Have more questions? Submit a request

Comments

Powered by Zendesk