Back to all 93 controls
Annex A 5.28
Organizational
A.5.28 Collection of evidence
Evidence is collected in a forensically sound way.
What good looks like
Procedure for chain of custody, log preservation, forensic imaging when needed.
Evidence an auditor will ask for
Evidence handling procedure, sample chain-of-custody form.
Put this control into practice
Check whether your organisation already meets Annex A 5.28 with the free Gap Analysis tool, or get implementation-ready templates for every Annex A control with the Document Pack.