Partially Implemented
- Evidence validation not required per AFR v05 p.9 (‘Validation Requirements per Implementation Status’)
- Status should be kept as “Partially Implemented” (no need to downgrade solely due to missing evidence)
- Assign “High” Gap Severity, unless the Control (“Standard Reference” Column C) is in the list below, in which case, Assign “Moderate” Gap Severity 5.4 5.9 to 5.13 5.19 to 5.23 6.1 to 6.6 7.1 to 7.14 8.1 8.30
- DO NOT add a Mitigation entry as stated in AFR v05 p.9
- DO NOT add an Assessor’s Comment as stated in AFR v05 p.9 Back to Start