Information security objectives and planning to achieve them
6.2
-
Last updated
Mandatory
Catalog reference
Set measurable information security objectives consistent with the policy, plan how to achieve them (what, resources, responsibility, timing, evaluation), and keep documented information about them.
Narrative — how we satisfy this requirement
The certification goal is broken down into Objectives with a target date and a Kpi each, and the Objectives are reviewed every three months.
Review
On trackNext review is 10/27/2027 — no urgency right now.
- Review cadence
- Every 365 days
- Last reviewed
- Next review due