@ISACA Article
Do Your Policy Documents Represent Current Practices?
Process owners are subject matter experts who understand processes, procedures and controls in place, whether documented or not. However, auditors usually go by the maxim that “If it’s not documented, it does not exist.”
3 August 2022