Control Evidence Mappings
Each control mapping documents what evidence Vallum produces to support your compliance program, what it does not produce, known limitations, and what remains your responsibility.
In Progress (11)
These mappings are under editorial review and will be published after quality verification.
ISO27001-A5.1: Information security policies reviewed and approved by management
ISO 27001 · Under review
ISO27001-A5.2: Information security roles and responsibilities clearly defined and allocated
ISO 27001 · Under review
ISO27001-A8.1: Operational planning and control of information security processes
ISO 27001 · Under review
ISO27001-A8.2: Information security risk assessment performed at planned intervals
ISO 27001 · Under review
ISO27001-A8.3: Information security risk treatment plan implemented and monitored
ISO 27001 · Under review
ISO27001-A9.3: Management review of information security management system at planned intervals
ISO 27001 · Under review
ISO27001-A9.2: Internal audit of ISMS conducted at planned intervals against requirements
ISO 27001 · Under review
ISO27001-A10.1: Nonconformities identified and corrective actions implemented and verified
ISO 27001 · Under review
ISO27001-A10.2: Continual improvement of ISMS suitability, adequacy, and effectiveness
ISO 27001 · Under review
ISO27001-A7.2: Competence of persons doing work affecting information security performance
ISO 27001 · Under review
ISO27001-A7.5: Documented information required by ISMS created, updated, and controlled
ISO 27001 · Under review