Simple question on design deficiency vs documentation flaw 874
-
If a control does not give comfort over any of the CEAVOP assertions would you say that it is a design deficiency or a documentation flaw ie it is not key and need not have been documented in the first place?
-
From your brief decription I would say that the ‘control’ was either not really a control or irrelevant to the process (and therefore not worthy of being documented).
-
Many thanks, Dens
That makes sense