# data[].attributes.body
Mobile device policy
A policy and supporting security measures shall be adopted to
manage the risks introduced by using mobile devices.

# data[].attributes.body
Mobile device policy
A policy and supporting security measures shall be adopted to
manage the risks introduced by using mobile devices.

# data[].attributes.body
Mobile device policy
A policy and supporting security measures shall be adopted to
manage the risks introduced by using mobile devices.

# data[].attributes.body
Teleworking
A policy and supporting security measures shall be implemented to
protect information accessed, processed or stored at teleworking
sites.

# data[].attributes.body
Teleworking
A policy and supporting security measures shall be implemented to
protect information accessed, processed or stored at teleworking
sites.

# data[].attributes.body
Teleworking
A policy and supporting security measures shall be implemented to
protect information accessed, processed or stored at teleworking
sites.

# data[].attributes.body
Termination or change
of employment responsibilities
Information security responsibilities and duties that remain valid
after termination or change of employment shall be defined, communicated
to the employee or contractor and enforced.

# data[].attributes.body
Termination or change
of employment responsibilities
Information security responsibilities and duties that remain valid
after termination or change of employment shall be defined, communicated
to the employee or contractor and enforced.

# data[].attributes.body
Termination or change
of employment responsibilities
Information security responsibilities and duties that remain valid
after termination or change of employment shall be defined, communicated
to the employee or contractor and enforced.

# data[].attributes.body
Responsibility for assets
To identify organizational assets and define appropriate protection responsibilities.

# data[].attributes.body
Responsibility for assets
To identify organizational assets and define appropriate protection responsibilities.

# data[].attributes.body
Classification of information
Information should be classified in terms of legal requirements, value, criticality and sensitivity to unauthorised disclosure or modification.

# data[].attributes.body
Responsibility for assets
To identify organizational assets and define appropriate protection responsibilities.

# data[].attributes.body
Classification of information
Information should be classified in terms of legal requirements, value, criticality and sensitivity to unauthorised disclosure or modification.

# data[].attributes.body
Classification of information
Information should be classified in terms of legal requirements, value, criticality and sensitivity to unauthorised disclosure or modification.

# data[].attributes.body
User access management
To ensure authorized user access and to prevent unauthorized access to systems and services.

# data[].attributes.body
User access management
To ensure authorized user access and to prevent unauthorized access to systems and services.

# data[].attributes.body
User access management
To ensure authorized user access and to prevent unauthorized access to systems and services.

# data[].attributes.body
Review of user access rights
Asset owners should review users’ access rights at regular intervals.

# data[].attributes.body
Review of user access rights
Asset owners should review users’ access rights at regular intervals.

# data[].attributes.body
Review of user access rights
Asset owners should review users’ access rights at regular intervals.

# data[].attributes.body
Cryptographic controls
To ensure proper and effective use of cryptography to protect the confidentiality, authenticity
and/or integrity of information.

# data[].attributes.body
Cryptographic controls
To ensure proper and effective use of cryptography to protect the confidentiality, authenticity
and/or integrity of information.

# data[].attributes.body
Cryptographic controls
To ensure proper and effective use of cryptography to protect the confidentiality, authenticity
and/or integrity of information.

# data[].attributes.body
Secure Areas
To prevent unauthorized physical access, damage and interference to the organization’s information and information processing facilities.

# data[].attributes.body
Secure Areas
To prevent unauthorized physical access, damage and interference to the organization’s information and information processing facilities.

# data[].attributes.body
Secure Areas
To prevent unauthorized physical access, damage and interference to the organization’s information and information processing facilities.

# data[].attributes.body
Information security in supplier relationships - Supplier service delivery management
To ensure protection of the organization’s assets that is accessible by suppliers. - To maintain an agreed level of information security and service delivery in line with supplier agreements.

# data[].attributes.body
Information security in supplier relationships - Supplier service delivery management
To ensure protection of the organization’s assets that is accessible by suppliers. - To maintain an agreed level of information security and service delivery in line with supplier agreements.

# data[].attributes.body
Information security in supplier relationships - Supplier service delivery management
To ensure protection of the organization’s assets that is accessible by suppliers. - To maintain an agreed level of information security and service delivery in line with supplier agreements.

# data[].attributes.body
Management of information security incidents and improvements
To ensure a consistent and effective approach to the management of information security incidents, including communication on security events and weaknesses.

# data[].attributes.body
Management of information security incidents and improvements
To ensure a consistent and effective approach to the management of information security incidents, including communication on security events and weaknesses.

# data[].attributes.body
Management of information security incidents and improvements
To ensure a consistent and effective approach to the management of information security incidents, including communication on security events and weaknesses.

# data[].attributes.body
Mobile device policy
A policy and supporting security measures shall be adopted to
manage the risks introduced by using mobile devices.

# data[].attributes.body
Teleworking
A policy and supporting security measures shall be implemented to
protect information accessed, processed or stored at teleworking
sites.

# data[].attributes.body
Termination or change
of employment responsibilities
Information security responsibilities and duties that remain valid
after termination or change of employment shall be defined, communicated
to the employee or contractor and enforced.

# data[].attributes.body
Responsibility for assets
To identify organizational assets and define appropriate protection responsibilities.

# data[].attributes.body
Classification of information
Information should be classified in terms of legal requirements, value, criticality and sensitivity to unauthorised disclosure or modification.

# data[].attributes.body
User access management
To ensure authorized user access and to prevent unauthorized access to systems and services.

# data[].attributes.body
Management of privileged access rights
The allocation and use of privileged access rights should be restricted and controlled.

# data[].attributes.body
Review of user access rights
Asset owners should review users’ access rights at regular intervals.

# data[].attributes.body
Cryptographic controls
To ensure proper and effective use of cryptography to protect the confidentiality, authenticity
and/or integrity of information.

# data[].attributes.body
Secure Areas
To prevent unauthorized physical access, damage and interference to the organization’s information and information processing facilities.

# data[].attributes.body
Information security in supplier relationships - Supplier service delivery management
To ensure protection of the organization’s assets that is accessible by suppliers. - To maintain an agreed level of information security and service delivery in line with supplier agreements.

# data[].attributes.body
Management of information security incidents and improvements
To ensure a consistent and effective approach to the management of information security incidents, including communication on security events and weaknesses.