When to use this
Use this checklist during an internal audit of redundancy requirements, architecture, failover testing, recovery performance, and redundancy-related risk.
Related controls
- A.8.14 Redundancy of Information Processing Facilities
- A.8.14 Audit Evidence Pack
- Redundancy Requirements and Architecture Register
- Redundancy Failover Test Record
- Availability Requirement Mapping
Audit checklist
- Review availability requirements.
- Review BIA or continuity requirements.
- Review redundancy architecture.
- Check dependency coverage.
- Review risk assessment for redundant architecture.
- Sample failover or recovery tests.
- Compare actual recovery times with requirements.
- Review compensating controls for gaps.
- Review supplier/cloud resilience evidence where applicable.
Findings table
| Service/facility | Expected evidence | Observed evidence | Gap | Finding type | Action owner |
|---|---|---|---|---|---|
| TBD | TBD | TBD | TBD | NC / observation / conforming | TBD |
- Template
- Audit
- Iso27001
- A8 14
Note Metadata
Aliases: A.8.14 Redundancy Audit Checklist
Source: 90 Templates/A.8.14 Audit Checklist.md
Graph-sourced resources
Templates and evidence
Auditor evidence packs
Evidence collections and audit-facing verification material.
Related Notes
- A.8.14 Audit Evidence Pack
- Audit Evidence MOC
- ISO 27001 A.8.14 - Redundancy of Information Processing Facilities
- A.8 Technological Controls MOC
- A.8 Technological Controls Implementation Audit Risk Mapping
- Availability Requirement Mapping
- Redundancy Failover Test Record
- Redundancy Requirements and Architecture Register
- Audit Evidence Index
- Templates MOC