5.36
Compliance With Policies, Rules and Standards for Information Security
Regularly review compliance with the organization’s information security policy, topic-specific policies, rules, and standards.
-
4.4.3.9 The organization shall periodically review and/or test cyber security controls to ensure effectiveness. Testing and/or review shall take place at a minimum annually, or if a major change occurs in their system.
-
-