Information Gathering Citations
- Vicki McEwen
Information gathering citations ask specific questions designed to compile information about an organization, its facilities, products, services, and other assets. They help guide and determine the scope of an audit and are often in the form of questions such as "How many employees are in your organization?" or "what percentage of your employees are female?".
Like stubs and informational citations, information gathering citations do not contain mandates. However, information gathering citations are different because they are automatically mapped to the common control 6726: Document the organization's local environments.
Information gathering citations are the least frequent citation mappers encounter. The citation below is an example of what an information gathering citation might look like. You will notice that the citation asks the respondent to list the organization's internet browsers and malware protection applications.
Information Gathering Citation