A.5.35 A.5
Organizational / A.5.35
Independent review of the security program
In plain English
Someone outside the day-to-day running of things reviews whether the arrangements actually work, because the people who built them are the worst placed to judge.