hw>Aebersbach No edit summary |
Meryam Sahin (talk | contribs) m 1 revision imported |
(No difference)
| |
Revision as of 10:52, 19 June 2026
This chapter shal ensure that the ISMS has the necessary resources, competence, awareness, communication, and documented information. It contains five sub-clauses:
7.1 Resources
The organization must determine and provide the resources needed to establish and maintain the ISMS.
7.2 Competence
The organization must ensure that personnel are competent on the basis of education, training, or experience.
(security training, certifications, or job experience.)
7.3 Awareness
Employees must be aware of:
- The information security policy.
- Their contribution to the effectiveness of the ISMS.
- The implications of not conforming with ISMS requirements. (Awareness programs and campaigns)
7.4 Communication
The organization must determine:
- What to communicate, when, with whom, and how.
- Internal and external communication relevant to the ISMS.
7.5 Documented information
The organization must:
- Create and update documentation appropriately.
- Control it to ensure availability, confidentiality, and integrity.
