What is the next step that Operaze’s ISMS implementation team should take after drafting the information security policy? Refer to scenario 5.
What is the next step that Operaze’s ISMS implementation team should take after drafting the information security policy? Refer to scenario 5.
Drafting the information security policy involves selecting control objectives to be achieved in the organization. The policy should then be reviewed and approved by the top management. PECB Day 2 Page 50