Information security objectives and planning to achieve them
6.2
-
Last updated
Mandatory
Catalog reference
Set measurable information security objectives consistent with the policy, plan how to achieve them (what, resources, responsibility, timing, evaluation), and keep documented information about them.
Narrative — how we satisfy this requirement
The certification goal is broken down into Objectives with a target date and a Kpi each, and the Objectives are reviewed every three months.
None due within 31 days.