Is there an information security policy document which is approved by management, reviewed and maintained by an assigned owner, published, and communicated to all employees and relevant external parties?
Is there an information security policy document which is approved by management, reviewed and maintained by an assigned owner, published, and communicated to all employees and relevant external parties?