Under active development Content is continuously updated and improved

1.1.21.1.2

>Control Description

The network and information system security policy shall be reviewed and, where appropriate, updated by management bodies at least annually and when significant incidents or significant changes to operations or risks occur. The result of the reviews shall be documented.

Ask AI

Configure your API key to use AI features.