Security Policy: Difference between revisions

:1. documented information required by this International Standard; and

:2. documented information determined by the organization as being necessary for the effectiveness of the information security management system.

:3. the size of organization and its type of activities, processes, products and services;

:4. the complexity of processes and their interactions; and

:5. the competence of persons.