Should objectives be included in the Information Security Policy? #iso27001

*ISO 27001 Information Security Policy Objectives*

In my opinion, you should include the actual objectives directly in your information security policy. We've already outlined our organization's identity and goals, so it's time to ensure our policies fit our specific needs. There's a whole section on information security objectives. While there are templates available, I also show you how to write them from scratch if you prefer. We must create our own information security objectives, and they should ideally be part of our main information security policy. I recommend including the specific goals. This is a great way to share your objectives with everyone. When you share the policy with your staff, you're also sharing your goals with them. This is also helpful for external parties, who can see your objectives right away.

ISO 27001 Clause 5.2 Policy #iso27001certification

Видео Should objectives be included in the Information Security Policy? #iso27001 канала Stuart Barker