Remove Information Security Remove InfoSec Remove Security Awareness Remove Security Performance
article thumbnail

NBlog Aug 23 - ISMS comms plan

Notice Bored

Oh no, it's more circumspect: the standard says "the organization shall determine the need for internal and external communications relevant to the information security management system". on security awareness which is already in the plan anyway: maybe we should mention A.7.2.2 in the preamble though.