hw>Aebersbach No edit summary |
Meryam Sahin (talk | contribs) m 1 revision imported |
(No difference)
| |
Latest revision as of 10:52, 19 June 2026
The organization shall determine internal and external communications relevant to the ISMS (what, when, with whom, how, who communicates).
Put simply: Design security communication: define what is shared, through which channels, by whom, and under which confidentiality rules.
More specifically, this requires that the organization:
a. Defines what must be communicated (incidents, changes, objectives, supplier requirements).
b. Defines when/how communication happens (frequency, channels, classification).
c. Assigns roles and authority for communication (customers, auditors, regulators, public).
