Communication

The Board clearly communicates its expectations of management and employees concerning information systems access to ensure that only authorised individuals have access to specific IT resources