Management responsibilities
A.5.4
-
Last updated
Applicable
Catalog reference
Management must actively require personnel and contractors to apply information security in line with policies and procedures, and must visibly support the security program.
Narrative — how we satisfy this requirement
The Management Board expects every manager to apply the security rules in their team, and managers discuss security in their monthly team meeting.