Review the FSI security policy and any other policies by which we are governed. Review the assessment and reporting on compliance with the governing policies. Control Activity Security management periodically reports to a senior body on progress against the security plan. A senior body reviews the security management reports. Control Activity Management ensures that corrective actions are effectively implemented.
Top management initiates prompt action to correct deficiencies.
Corrective actions are tested after they have been implemented. Corrective actions are monitored on a continuing basis. Review documentation related to recommendations made by the security manager and responses received. Review documentation related to corrective actions.