Requirement
The cybersecurity function must ensure that the cybersecurity policies and procedures are implemented.
Control Implementation Guidelines
- Develop an action plan to implement cybersecurity policies, procedures, and standard controls. Such plan must include all internal and external stakeholders, to whom the organization's policies, procedures, and standard controls apply. Such stakeholders must be followed-up and monitored periodically to ensure the full and effective implementation of all requirements
- The cybersecurity function must ensure the implementation of cybersecurity controls and adherence to the approved and documented cybersecurity policies, procedures, and standard controls
- Ensure the implementation of cybersecurity policies, procedures, and standard controls, including controls and requirements, manually or electronically (automated)
Relevant Cybersecurity Tools
- A template of personnel acknowledgment and approval to follow the cybersecurity policies
- A template of personnel acknowledgment and approval to maintain information confidentiality
Expected Deliverables
- An action plan to implement the cybersecurity policies and procedures of the organization
- A report that outlines the review of the implementation of cybersecurity policies and procedures
