Communication

The organisation clearly communicates its expectations of management and employees concerning network security management and the need to protect information from unauthorised access, misuse, malfunction, modification, destruction or improper disclosure