A.5.1 — Policies for information security
This control establishes and maintains information security policies aligned with organizational objectives. Measures include defining scope, setting goals, and ensuring alignment with compliance requirements.
| Property | Value |
|---|---|
| Section | policy |
| Owner | operator |
Mapped Controls
| Control | Title |
|---|---|
| SID-ORG-01 | Information Security Policy |
Source: ISO/IEC 27001:2022 Annex A