English: Communicates and coordinates with other committees on matters of mutual interest.\cell }{\trowd\trautofit1\intbl\cellx1\cellx2\row }}{\par\pard \fs36\ql\b Suggested Table of Contents for ITS Audit Report\fs24\b0 \par\par} \pard \ql \sb100\sa100 {(Document Security Classification)}\par \pard\pard \ql \sb100\sa100 {Notice to the reader}\par \pard\pard \ql \sb100\sa100 {(Inside Front Cover)}\par \pard\pard \ql \sb100\sa100 {Foreword}\par \pard\pard \ql \sb100\sa100 {1.0 Executive summary}\par \pard\pard \ql \sb100\sa100 {1.1 Purpose}\par \pard\pard \ql \sb100\sa100 {1.2 Objectives}\par \pard\pard \ql \sb100\sa100 {1.3 Scope}\par \pard\pard \ql \sb100\sa100 {1.4 Major Observations}\par \pard\ql 1.5 Overall Assessment\par \pard{\pard{\pard\plain{\listtext\pard\plain}\ls0\li720\ri0\lin720\rin0\fi-360{GSP Compliance Statement}\par }{\pard\plain{\listtext\pard\plain}\ls0\li720\ri0\lin720\rin0\fi-360{GSP Implementation Efficiency Statement}\par }{\pard\plain{\listtext\pard\plain}\ls0\li720\ri0\lin720\rin0\fi-360{GSP Implementation Effectiveness Statement}\par }}\pard \ql \sb100\sa100 {1.6 Major Recommendations}\par \pard\pard \ql \sb100\sa100 {{\b 2.0 Introduction}}\par \pard\pard \ql \sb100\sa100 {2.1 Background/Purpose}\par \pard\pard \ql \sb100\sa100 {2.2 Objectives}\par \pard\ql 2.3 Scope\par \pard{\pard{\pard\plain{\listtext\pard\plain}\ls0\li720\ri0\lin720\rin0\fi-360{Organizations Audited}\par }{\pard\plain{\listtext\pard\plain}\ls0\li720\ri0\lin720\rin0\fi-360{Business Functions Audited}\par }{\pard\plain{\listtext\pard\plain}\ls0\li720\ri0\lin720\rin0\fi-360{Locations}\par }{\pard\plain{\listtext\pard\plain}\ls0\li720\ri0\lin720\rin0\fi-360{Areas of Security Policy Covered}\par }}\pard \ql \sb100\sa100 {2.4 Approach and Methodology}\par \pard\pard \ql \sb100\sa100 {2.5 Audit Team}\par \pard\pard \ql \sb100\sa100 {2.6 Coverage Period}\par \pard\pard \ql \sb100\sa100 {2.7 Acknowledgments}\par \pard\pard \ql \sb100\sa100 {{\b 3.0 Findings and recommendations}}\par \pard\pard \ql \sb100\sa100 {3.1 Organizing & Administering ITS}\par \pard\pard \ql \sb100\sa100 {3.2 ITS and Personnel Security}\par \pard\pard \ql \sb100\sa100 {3.3 ITS and Physical Security}\par \pard\pard \ql \sb100\sa100 {3.4 ITS}\par \pard\pard \ql \sb100\sa100 {3.4.1 Hardware Security}\par \pard\pard \ql \sb100\sa100 {3.4.2 Software Security}\par \pard\ql 3.4.3 Communications Security\par \pard Operations Security \pard \ql \sb100\sa100 {(Management response(s) for each finding)}\par \pard\pard \ql \sb100\sa100 {{\b Appendix A:
French: \cell }{\trowd\trautofit1\intbl\cellx1\cellx2\row }}{\par\pard \fs36\ql\b Table des matières proposée pour un rapport de vérification de la STI\fs24\b0 \par\par} \pard \ql \sb100\sa100 {{\b (Classification de sécurité du document)}}\par \pard\pard \ql \sb100\sa100 {{\b Avis au lecteur}}\par \pard\pard \ql \sb100\sa100 {{\b (Verso de la page couverture)}}\par \pard\pard \ql \sb100\sa100 {{\b Avant-propos}}\par \pard\pard \ql \sb100\sa100 {{\b 1.0 Sommaire}}\par \pard\pard \ql \sb100\sa100 {1.1 Objet}\par \pard\pard \ql \sb100\sa100 {1.2 Objectifs}\par \pard\pard \ql \sb100\sa100 {1.3 Étendue}\par \pard\pard \ql \sb100\sa100 {1.4 Principales observations}\par \pard\ql 1.5 Évaluation générale\par \pard{\pard{\pard\plain{\listtext\pard\plain}\ls0\li720\ri0\lin720\rin0\fi-360{Énoncé de conformité de la PSG}\par }{\pard\plain{\listtext\pard\plain}\ls0\li720\ri0\lin720\rin0\fi-360{Énoncé sur l'efficience et la mise en oeuvre de la PSG}\par }{\pard\plain{\listtext\pard\plain}\ls0\li720\ri0\lin720\rin0\fi-360{Énoncé sur l'efficacité de la mise en oeuvre de la PSG}\par }}\pard \ql \sb100\sa100 {1.6 Principales recommandations}\par \pard\pard \ql \sb100\sa100 {{\b 2.0 Introduction}}\par \pard\pard \ql \sb100\sa100 {2.1 Contexte-Objet}\par \pard\pard \ql \sb100\sa100 {2.2 Objectifs}\par \pard\ql 2.3 Étendue\par \pard{\pard{\pard\plain{\listtext\pard\plain}\ls0\li720\ri0\lin720\rin0\fi-360{Organisations vérifiées}\par }{\pard\plain{\listtext\pard\plain}\ls0\li720\ri0\lin720\rin0\fi-360{Activités vérifiées}\par }{\pard\plain{\listtext\pard\plain}\ls0\li720\ri0\lin720\rin0\fi-360{Locaux}\par }{\pard\plain{\listtext\pard\plain}\ls0\li720\ri0\lin720\rin0\fi-360{Domaines de la politique sur la sécurité abordés}\par }}\pard \ql \sb100\sa100 {2.4 Approche et méthode}\par \pard\pard \ql \sb100\sa100 {2.5 Équipe de vérification}\par \pard\pard \ql \sb100\sa100 {2.6 Période de la vérification}\par \pard\pard \ql \sb100\sa100 {2.7 Remerciements}\par \pard\pard \ql \sb100\sa100 {{\b 3.0 Constatations et recommandations}}\par \pard\pard \ql \sb100\sa100 {3.1 Organiser et administrer la STI}\par \pard\pard \ql \sb100\sa100 {3.2 La STI et la sécurité du personnel}\par \pard\pard \ql \sb100\sa100 {3.3 La STI et la sécurité matérielle}\par \pard\pard \ql \sb100\sa100 {3.4 STI}\par \pard\pard \ql \sb100\sa100 {3.4.1 Sécurité du matériel}\par \pard\pard \ql \sb100\sa100 {3.4.2 Sécurité des logiciels}\par \pard\pard \ql \sb100\sa100 {3.4.3 Sécurité des communications}\par \pard\pard \ql \sb100\sa100 {3.4.4 Sécurité de l'exploitation\line (Réponse(s) de la direction à chacune des constatations)}\par \pard\pard \ql \sb100\sa100 {{\b Annexe A :