In response to Reply 38004 (2026), was the exclusion of trial accounts from access control testing recorded as a residual risk, limitation, assumption, exception or outstanding action in the Certification and Accreditation approval process; if not, why not?

Asked by

Lawrence Xu-Nan

List MP · Green Party

Question

In response to Reply 38004 (2026), was the exclusion of trial accounts from access control testing recorded as a residual risk, limitation, assumption, exception or outstanding action in the Certification and Accreditation approval process; if not, why not?