Posts

Showing posts with the label Conduct Reviews

ISO 27001 Annex : A.18 Compliance

Image
ISO 27001 Annex : A.18 Compliance in this article explain  Compliance with Legal and Contractual Requirements,  Identification of Applicable Legislation and Contractual Requirements and  Intellectual Property Rights this controls. A.18.1 Compliance with Legal and Contractual Requirements It’s objective is  to protect against violation of legal, statutory, regulatory, or contractual obligations relating to  information security  and any other security requirements. A.18.1.1 Identification of Applicable Legislation and Contractual Requirements Control-   Each of these information systems and  organizations  should specifically identify, document, and update all relevant statutory, regulatory, contractual requirements, and the approach of the organization towards compliance with these requirements. Implementation Guidance-  There must also be identification and documentation of basic controls and individual obligations to fulfill those crit...