ISO 27001 5.10 Acceptable Use of Information and Other Associated Assets

Requirement

"Rules for the acceptable use and procedures for handling information and other associated assets shall be identified, documented and implemented."[1]

Explanation

Create an IT acceptable use policy that defines what users are forbidden from doing on the information system as well as other terms and conditions of use. Every information system user shall be required accept the policy before being granted access to the system.

References

ISO/IEC 27001

Need help putting this into practice? See our ISO 27001 compliance services or read our ISO 27001 articles.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo