gov-02-publishingcybersecurity&dataprotectiondocumentation.md

SCF - GOV-02 - Publishing Cybersecurity & Data Protection Documentation

Mechanisms exist to establish, maintain and disseminate cybersecurity & data protection policies, standards and procedures.

Mapped framework controls

GDPR

• Art 32.1
• Art 32.2
• Art 32.3
• Art 32.4

ISO 27001

• 5.1.a
• 5.2.a
• 5.2.b
• 5.2.c
• 5.2.d
• 5.2.e
• 5.2.f
• 5.2.g
• 5.2
• 7.5.1.a
• 7.5.1.b
• 7.5.1
• 7.5.2.a
• 7.5.2.b
• 7.5.2.c
• 7.5.2
• 7.5.3.a
• 7.5.3.b
• 7.5.3.c
• 7.5.3.d
• 7.5.3.e
• 7.5.3.f
• 7.5.3
• 7.5

ISO 27002

• A.5.1
• A.5.37

SOC 2

• CC5.3

Control questions

Does the organization establish, maintain and disseminate cybersecurity & data protection policies, standards and procedures?