Understanding the organisation and its context
4.1
-
Last updated
Mandatory
Catalog reference
Identify the internal and external issues that affect the organisation's ability to achieve the intended outcomes of its information security management system, and keep that understanding current.
Narrative — how we satisfy this requirement
The Management Board and the ISMS Manager go through the internal and external issues in the monthly ISMS meeting and keep them in the Business Issues register.
Review
On trackNext review is 10/27/2027 — no urgency right now.
- Review cadence
- Every 365 days
- Last reviewed
- Next review due