Policies for information security
A.5.1
-
Last updated
Applicable
Catalog reference
Establish and maintain a documented information security policy, supported by topic-specific policies, that defines management direction and the organisation's approach to information security. Review periodically and after significant changes.
Narrative — how we satisfy this requirement
The Management Board has approved the information security policy, and every employee acknowledges it when they join and after each yearly revision.