Policies for information security
A.5.1
-
Last updated
Applicable
Catalog reference
Establish and maintain a documented information security policy, supported by topic-specific policies, that defines management direction and the organisation's approach to information security. Review periodically and after significant changes.
Narrative — how we satisfy this requirement
The Management Board has approved the information security policy, and every employee acknowledges it when they join and after each yearly revision.
Code
Title
No procedures are linked to this requirement yet. Link from a procedure's Edit page.