23. Internal Audit

INTERNAL AUDIT

Build and maintain an "internal audit" or Information Assurance (IA) capability to govern controls. POA&M deficiencies & document procedures.