Annex A 5.31 - Legal, Statutory, Regulatory and Contractual Requirements

Legal, statutory, regulatory and contractual requirements relevant to information security and the organization’s approach to meet these requirements shall be identified, documented and kept up to date.