graphgrc

SCF - HRS-05.1 - Rules of Behavior

Mechanisms exist to define acceptable and unacceptable rules of behavior for the use of technologies, including consequences for unacceptable behavior.

Mapped framework controls

ISO 27001

• 7.3.a
• 7.3.b
• 7.3.c
• 7.3

ISO 27002

• A.5.10
• A.5.14
• A.5.4
• A.6.2

NIST 800-53

• PL-4

SOC 2

• CC1.1

Control questions

Does the organization define acceptable and unacceptable rules of behavior for the use of technologies, including consequences for unacceptable behavior?

This site is open source. Improve this page.