SG-05—Procedures

>Control Description

Organization's key control capabilities are supported by documented procedures that are communicated to authorized personnel.

Theme

Process

Type

Preventive

Policy/Standard

Information Security Management Standard

>Implementation Guidance

1. Ensure that a process is defined and documented so that all key control capabilities are supported by documented procedures. 2. Ensure that these procedures are communicated to authorized personnel.

>Testing Procedure

1. Inspect and validate that a process is defined and documented so that all key control capabilities are supported by documented procedures. 2. Validate that these procedures are communicated to authorized personnel.