Mechanisms exist to establish, maintain and disseminate cybersecurity & data protection policies, standards and procedures.
Does the organization establish, maintain and disseminate cybersecurity & data protection policies, standards and procedures?