Audit

Independent audits of IT configuration in new and existing information systems are conducted to ensure the system’s controls around information protection align with the design and classification scheme