organizational
All tags →12 articles tagged "organizational".
ISO 27001 Control A.5.1: Policies for Information Security
Annex A control 5.1 requires an information security policy and topic-specific policies that are approved, communicated and reviewed. How to build a policy set people actually read.
8 min read
ISO 27001 Control A.5.2: Information Security Roles and Responsibilities
Annex A control 5.2 requires security roles and responsibilities to be defined and allocated according to organizational needs. How to assign owners without building a bureaucracy.
8 min read