Annex A 5.36 - Compliance With Policies, Rules and Standards for Information Security

Compliance with the organization’s information security policy, topic-specific policies, rules, and standards shall be regularly reviewed.