Domanda di colloquio di ServiceNow

How do you typically audit ISMS? How do you communicate findings?