Information Security Policies. 1.3.1. The Company shall have a defined and documented information security management system including an information security policy and procedures in place, which shall be approved by Company’s management. They shall be published within Company´s organization and communicated to relevant Company personnel. 1.3.2. The Company shall periodically review Company’s security policies and procedures and update them if required to ensure their compliance with this Appendix.
Appears in 5 contracts
Samples: Data Protection Agreement, Data Protection Agreement, Data Protection Agreement