Security Policy: Difference between revisions
Jump to navigation
Jump to search
m →Policy |
|||
| Line 9: | Line 9: | ||
The organization shall determine: | The organization shall determine: | ||
# | # Interested parties that are relevant to the information security management system; and | ||
# | # The requirements of these interested parties relevant to information security. | ||
<small>NOTE The requirements of interested parties may include legal and regulatory requirements and contractual obligations. </small> | <small>NOTE The requirements of interested parties may include legal and regulatory requirements and contractual obligations. </small> | ||