Appendix B5
Remediation and evidence
Assign masking, quarantine and deletion to an owner through an approval flow; prove every step.
B5.1For risky findings, masking, quarantine or deletion actions are started, assigned to an owner with separate approval authority, and every operation (who, when, why) is written to the audit log.
Related appendices