| CIPP ELEMENTS |
| Compliance |
Definition and documentation of company specific requirements for meeting and maintaining compliance, based on business interviews and regulatory research.
|
| Infrastructure and Systems |
Analysis of the available client documentation and strategic testing of key security elements within the infrastructure |
| Policy and Process |
Review and evaluation of the documented and acknowledged information and network security processes and policies, including employee interviews and evaluations |
| Physical |
Review and evaluation of security measures for one designated facility |