A.18.1.1: Identification of Applicable Legislation and Contractual Requirements

Identify and document the legislative, regulatory, and contractual requirements related to information security and the organization’s approach to meet these requirements.