Communication

The organisation clearly communicates its expectations of management and employees concerning the transfer of information and the security risks involved in relation the confidentiality, integrity and availability of the information