Athena Compliance Centre - Security Policy Details

Domain

Summary

The organisation must have an implemented security policy to match its risk profile. This is usually the ultimate responsibility of the CIO/Director.

Overview

IASME provides a model template policy which can be adapted to the individual circumstances of most organisations. Dates for achieving objectives can be set within the policy, which should be reviewed by the Board at regular intervals or when security incidents occur or changes in the risk landscape emerge.

Detailed Description

Reference/Support Links

Governing bodies/Certifiers/Legislation Links