Provided information on the scope of the audit plan for each year of the 3 year cycle.
Excluded from SoA controls 11.2.2 -> 11.2.8 because:
FundApps offices are leased and the building management provides the office space and are responsible for the maintenance of the equipment (A/C, Fire Extinguisher, CCTVs, UPS, etc.,).
FundApps does not have any network devices, servers and any other equipment on premises.
Aligned the lockout period across the policy.
Updated description of Office physical security to match with latest practices.