Guest user Created: Sep 04, 2018 Last commented: Sep 04, 2018

Information security management policy vs information security policy

ISO 27001 & 22301

Is the Information security management system policy the same thing as the information security policy?

0 0

Assign topic to the user

Select user

Expert

Dejan Kosutic Sep 04, 2018

Answer:

Yes, in the context of ISO 27001 this is the same document - such a document defines top-level management intent regarding information security and general roles and responsibilities.

Detailed security rules are usually written through detailed policies, for example in our toolkit you will see IT Security Policy that describes detailed general rules for all employees.

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Sep 04, 2018

Expert Advice Community