diff --git a/controls/README.md b/controls/README.md index 66e06d1fd..4b83bfd67 100644 --- a/controls/README.md +++ b/controls/README.md @@ -13,14 +13,15 @@ labelled with three levels: those, your auditor or customer will ask questions, you better justify it. - **Optional** – Your auditor or customer might ask questions if any of those elements are necessary to mitigate a risk you have. - + - **Advanced** – They show a great commitment toward security. Unless it is the only way to mitigate a risk very specific to your company, you won’t be asked @@ -31,19 +32,19 @@ labelled with three levels: We have regrouped what you need to do by different thematic in order to setup the proper foundations for your company to get SOC-2: - + ### Physical assets