Implementing an Information Security Management System by Abhishek Chopra & Mukund Chaudhary

Author:Abhishek Chopra & Mukund Chaudhary
Language: eng
Format: epub
ISBN: 9781484254134
Publisher: Apress

Where labeling is not required

Evidence that can be prepared: Information classification policy and information classification guideline.

Who prepares it: The information security team is responsible for preparing the information classification policy and guideline.

For external audit: The auditor will look at the records for information labeling along with the policy document.

A.8.2.3 Handling of Assets (Control ISO 27001)

Procedures for handling assets should be developed and implemented in accordance with the information classification scheme adopted by the organization.

Explanation/what is required: This control ensures the proper handling of assets by having a clear procedure for processing, storing, and communicating information assets. These steps required to ensure secure handling of assets:Maintain a record for use by authorized recipients.

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.