Citation Audit

Citation: Article 9 1. ¶ 2 – The policies, procedures and controls referred to in the first subparagraph shall be proportionate to the nature of the business, including its risks and complexity, and the size of the obliged entity and shall cover all the activities of the obliged entity that fall under the scope of this Regulation.

Control: CC ID 1241 – Establish and maintain the scope of the organizational compliance framework and Information Assurance controls.