Glossary: Compliance, Privacy and Penetration Testing

Assertion

Also written: management assertion, management's assertion

A formal claim, usually from management, that a control is in place or a statement is true, such as 'we disable leavers' accounts within one business day'. It is the starting point the auditor must test, so on its own it is the weakest evidence.