ISMS.1.A2 Defining Security Objectives and Strategy [Top Management] (B)
An organisation's Top Management MUST initiate and establish the security process. For this purpose, the Top Management MUST define and document appropriate security objectives and an information security strategy. Conceptual specifications MUST be developed and organisational framework conditions established to enable the proper and secure handling of information within all the organisation's business processes or specialised tasks. The Top Management MUST support and take responsibility for its organisation's security strategy and security objectives. The Top Management MUST regularly review these security objectives and the security strategy to ensure that they are still relevant and appropriate and can be implemented effectively.
1. Pregled
1.1 Sklici
1.2 Ugotovljene zahteve
1.3 Povezani predpisi
2. Ugotovljene zahteve
3. Povezani predpisi
Povezane zadeve
|