—A.7.2.1: Management Responsibilities
Require management to ensure that employees and contractors apply information security in accordance with established policies and procedures.
—A.7.1.2: Terms and Conditions of Employment
Ensure that employees, contractors, and third-party users agree to and sign the terms and conditions of their employment contract, which states their and the organization’s responsibilities for information security.