The Engagement Manager should collect evidence, such as work products, controls and measures, results, and improvement
information derived from the Security And Data Protection Management stream and document the same in order to
support the future use and improvement of the Information Security And Data Protection Management process and
associated assets. The information will be consolidated in the overall Service Close-Down Report, and will be made
available to those who are (or who will be) planning and performing similar Service Engagements, as well as those who
are locally responsible for continuous process improvement.
|