A.5.1

Written security policies, approved and kept current

organizational control

What it means

Define an approved infosec policy set, publish it to the right people, review it on schedule and on major change.

Get A.5.1 into your SoA automatically

StandardOS pre-fills this control's applicability and justification from a seven-question profile, then tracks its implementation.