A.5.1.2 of the ISO 27001 standard requires organizations to evaluate the process for reviewing information security and related policies. This involves checking a sample of policies for details such as policy title, scope and applicability, status, names of authors and accountable owners, version numbers, dates of publication, who approved them, document history/date of last and next reviews, and associated compliance arrangements.
Daily Archives: April 3, 2023
1 post