4.7.2 Certification of the Account

Second, in order to build the account, a certain number of processes need to be in place. For example, incident reporting and analysis processes need to be defined, tested and implemented and evidence collection procedures need to be verified. Like any other organisational and technical processes, these elements are certifiable, provided that a reference organisational standard exists. These elements would have a place within an accountability management standard as we suggested in 1.2.2.