Is a management list prepared for applications and software used for applications in control that are listed in the Information System Survey List.
And is the list updated appropriately? Is inventory carried out on a regular basis (once a year or more)?