STA-04: Provider Internal Assessments

CSF v1.1 References:

PF v1.0 References:

Control Statement

The provider shall perform annual internal assessments of conformance to, and effectiveness of, its policies, procedures, and supporting measures and metrics.