Understanding the needs and expectations of interested parties
4.2
-
Last updated
Mandatory
Catalog reference
Determine which parties are relevant to the ISMS, what their information security requirements are, and which of those requirements will be addressed through the management system.
Narrative — how we satisfy this requirement
Customers, regulators, suppliers, and staff are kept as Interested Parties with their requirements and the source of each, and the list is reviewed every year.
Review
On trackNext review is 10/27/2027 — no urgency right now.
- Review cadence
- Every 365 days
- Last reviewed
- Next review due