Documentation requirements for ISO 27001
1) Documented statements of the ISMS policy and Objectives Policy:- Information security policy set matching the characteristics of the business, the organization, its location, [information] assets and technology, being a “superset of” (i.e.including) both of the following: An ISMS policy defining the objective-setting management framework for the ISMS, giving it an overall sense of direction/pur... »