A.6.8

Making it easy for staff to report problems

people control

What it means

Give people a channel to report observed or suspected security events promptly — and make sure they know it.

Get A.6.8 into your SoA automatically

StandardOS pre-fills this control's applicability and justification from a seven-question profile, then tracks its implementation.