💼 A.16.1.3 Reporting information security weaknesses
- Contextual name: 💼 A.16.1.3 Reporting information security weaknesses
- ID:
/frameworks/iso-iec-27001-2013/16/01/03 - Located in: 💼 A.16.1 Management of information security incidents and improvements
Description
Employees and contractors using the organization’s information systems and services shall be required to note and report any observed or suspected information security weaknesses in systems or services.
Similar
- Internal
- ID:
dec-c-87fa1331
- ID:
Similar Sections (Give Policies To)
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|---|---|---|---|
| 💼 NIST CSF v1.1 → 💼 DE.DP-4: Event detection information is communicated | 30 | 33 | ||
| 💼 NIST CSF v1.1 → 💼 PR.IP-12: A vulnerability management plan is developed and implemented | 7 | 8 |
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|