3.7.2 Create “Remediation List”
-Similarly to “Assessment of the Control Design Effectiveness”, Assessee creates the remediation policies and
specific actions for the deficient Controls.
-Assessor checks the content of the Remediation List provided by Assessee, and checks whether the remediation
policies and specific actions are appropriate or not.