ABSTRACT
The “Organization of Information Security” clause is particularly important to the overall information security initiative because controls within this section set the expectation for management’s commitment and involvement with information security. In addition, information security as it relates to external parties is clearly defined and presented in a series of controls.
