Security Policy: Difference between revisions

Jump to navigation Jump to search
Line 121: Line 121:


     <small>NOTE Organizations can design controls as required, or identify them from any source. </small>
     <small>NOTE Organizations can design controls as required, or identify them from any source. </small>
# Compare the controls determined above with those in Annex A of ISO/IEC 27001:2013 and verify that no necessary controls have been omitted;
# Compare the controls determined above with those in Annex A of ISO/IEC 27001:2013 and verify that no necessary controls have been omitted;