[Autogenerated] Finally, we come to the last requirement 11.6,
which is by now are very old friend.
The policies and procedures, requirements.
And in case you need a reminder,
it wants to make sure that the organization has the necessary
policies on procedures in place to support compliance with all
the individual parts of required 11.
They need to be documented,
available and in use by the people who should be using them.
And those people will be interviewed by the NSA to make sure
they're indeed following the policies.
The QoS A will also validate the policies and procedures match the requirements.
So that's the end of the non ___________ testing parts of requirement 11.
All that remains now is to join the conversation between Yusa,
Jacob, Ansari and me,
where we discuss quite a lot about the things that could improve vulnerability,
scanning what really is a significant change and also how
to deal with missed quarterly scans