...
- Explicit Management Assertion that the multi-factor alternative meets or exceeds the effect of the requirments in section 4.2.3 of the IAP.
- Description of the basis on which management is making that assertion.
- Auditor's explicit concurrence and positive attestation to management's assertion that the multifactor alternative meets or exceeds the effect of the rquirements in 4.2.3
As a result of this first submission for certification using an alternative means, InCommon has worked with the AAC to develop more explicit criteria for documenting alternative means. The draft document is at _____________. More guidance regarding information to be included in the audit summary will be published at <URL for what to include in audit report.>
Scope:
Gap Analysis:
Management Assertion:
...