A.5 Information Security Policies

The documents from section A.5 are not missing from the toolkit – you can find them here:
- A.5 – all the documents from folder “08 Annex A” cover the requirements about information security policies (A.5.1.1 and A.5.1.2)

Included in the toolkit there is a List of Documents file that shows which documents cover which clauses of the standard.

Hi,
There is nothing from A.5 in the folder "08 Annex A".  And also the List of Documents starts at A.6 under "08 Annex A..."

First of all, I'm sorry about this confusion.

Please note that the link between the controls from section A.5 and the documents in folder 08 Annex A is stated in the Statement of Applicability document, located on folder 06 Applicability of Controls:

• Implementation method for control A.5.1.1: "All policies referred to below in this column." (i.e. the Information Security Policy, and policies included in folder 08 Annex A)
• Implementation method for control A.5.1.2: "Each policy has a designated owner who has to review the document at planned interval

Considering that, there is no need to include a reference to these controls in each document, because the reference is already made in the SoA.