1.1.2—1.1.2
>Control Description
The network and information system security policy shall be reviewed and, where appropriate, updated by management bodies at least annually and when significant incidents or significant changes to operations or risks occur. The result of the reviews shall be documented.
Ask AI
Configure your API key to use AI features.