DSC Assurance Team Reporting Example Reporting Year: BCM BCM BCM BCM JAN FEB MAR APR MAY JUN JUL AUG SEP OCT NOV DEC 18th April first meeting Audit Committee Audit Committee ISAE3402 Summary Audit & Assurance Report Assurances in the period Planned work (proactive and responsive to business) Assurance against findings ISO27001 and ISO9001 Audit & Assurance Report Interim Audit & Assurance Progress Report Interim Audit & Assurance Progress Report Monthly Team Report BCM incidents / drills P1 audit findings – raised / closed ISO27001 and ISO9001 non-conformances ISMS71 incidents – root cause and status / closing measures Performance Audit First reports (for BCM / Audit & Assurance) Include an overview of reporting structure, resourcing, format, background to the process

BCM Example Reporting Year: JAN FEB MAR APR MAY JUN JUL AUG SEP OCT NOV DEC BIA Plan Review & Maturity Assessment IMT Exercise February Report: Prior Year Summary Priorities for coming year Exercise scope and drivers August Report: Criticality changes Plan Review timetable November Report: Significant plan changes Maturity Assessment Horizon scanning May Report: Exercise outcomes BIA focus