Security Policy: Difference between revisions

Jump to navigation Jump to search
Line 80: Line 80:
==== General====
==== General====


When planning for the information security management system, the organization shall consider the issues referred to [[https://wiki.officience.com/Security_Policy#Understanding_the_organization_and_its_context]] and the requirements referred to in [[https://wiki.officience.com/Security_Policy#Understanding_the_needs_and_expectations_of_interested_parties]] and determine the risks and opportunities that need to be addressed to:
When planning for the information security management system, the organization shall consider the issues referred to [[https://wiki.officience.com/Security_Policy#Understanding_the_organization_and_its_context|1.1]] and the requirements referred to in [[https://wiki.officience.com/Security_Policy#Understanding_the_needs_and_expectations_of_interested_parties|1.2]] and determine the risks and opportunities that need to be addressed to:


:1. ensure the information security management system can achieve its intended outcome(s);  
:1. ensure the information security management system can achieve its intended outcome(s);