A.5.37

Writing down how things are actually done

organizational control

What it means

Document operating procedures for security-relevant activities and make them available to those who need them.

Get A.5.37 into your SoA automatically

StandardOS pre-fills this control's applicability and justification from a seven-question profile, then tracks its implementation.