A.5.28

Preserving evidence after an incident

organizational control

What it means

Collect and preserve incident evidence in a way that holds up.

Get A.5.28 into your SoA automatically

StandardOS pre-fills this control's applicability and justification from a seven-question profile, then tracks its implementation.