5.1
Information Security Policies
The Information Security and other related policies should be developed and after management approval, communicated to relevant personnel and reviewed at regular intervals.
-
4.1.2.1 – Top management shall demonstrate their commitment to the cyber security program by:
a) ensuring the cyber security policy and objectives are established and are aligned with the strategic direction of the organization;
b) ensuring that the resources needed for the cyber security program are available and are aligned with the cyber security policy and objectives;
c) communicating the importance of effective cyber security and of conforming to the cyber security program requirements;
d) establishing cybersecurity program metrics and tracking progress; and supporting other relevant management roles to demonstrate their leadership as it applies to their areas of responsibility.
e) supporting other relevant management roles to demonstrate their leadership as it applies to their areas of responsibility -
-