+APP.6.A10 Establishing a Security Policy for Software Use (S)

APP.6.A10 Establishing a Security Policy for Software Use (S)

An organisation SHOULD establish a security policy that summarises the regulations that determine how software is to be used and operated. The policy SHOULD be known to all the relevant people in charge and employees of the organisation and SHOULD represent the basis for their actions and work. In terms of content, the policy SHOULD also include a manual that explains how software should be used and managed.

Employee compliance with the policy SHOULD be checked regularly and at random. The policy SHOULD be updated at regular intervals.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.31 Incorrect Use or Administration of Devices and Systems