Guys,
From time to time we miss something simple that an external auditor might catch.
For example we changed the scope of our certificate but neglected to update the required exclusions.
What is an acceptable way to root cause something this simple? It's obvious easy to fix and has been done but how do you convince an auditor that you just "missed" it?
Thanks
From time to time we miss something simple that an external auditor might catch.
For example we changed the scope of our certificate but neglected to update the required exclusions.
What is an acceptable way to root cause something this simple? It's obvious easy to fix and has been done but how do you convince an auditor that you just "missed" it?
Thanks