5.1 - Management direction for information security
Objective : To provide management direction and support for information security in accordance with business requirements and relevant laws and regulations.
5.1.1 Policies for information security
A set of policies for information security is defined and approved by management of 365Talents, published and communicated to employees and relevant external parties.
- Code of Conduct
- Information Security Policy (AUP)
- Information Security Roles and Responsibilities
- Asset Management Policy
- Access Control Policy
- Data Management Policy
- Operations Security Policy
- Human Resource Security Policy
- Physical Security Policy
- Risk Management Policy
- Third-Party Management Policy
- Cryptography Policy
- Business Continuity and Disaster Recovery Plan
- Incident Response Plan
- Secure Development Policy\
5.1.2 Review of the policies for information security
The security policies are reviewed annually.