A.17.1.2: Implementing Information Security Continuity
Establish, document, implement and maintain processes, procedures and controls to ensure the required level of continuity for information security during an adverse situation.
A.17.1.1: Planning Information Security Continuity
Include information security continuity in the organization’s business continuity management systems.
—A.7.2.1: Management Responsibilities
Require management to ensure that employees and contractors apply information security in accordance with established policies and procedures.
Information Security in Project Management
Include information security in the management of projects.