iso 27001.监督审核是什么？
iso 27001..surveillance audits cover a subset of the isms and are conducted by a certification body in years two- and three of the three year iso 27001 certification cycle.
值得注意的是，国家标准与技术研究所（nist), defines a capability as 'a set of mutually reinforcing security controls implemented by technical, physical, and procedural means. such controls are typically selected to achieve a common information security-related purpose.' there are 43 cmmc capabilities that fit into the 17 cmmc domains.