Communication

The organisation clearly communicates its expectations of management and employees concerning physical and environment security and clearly articulates its position regarding threats from unauthorised physical access, damage and/or interference to information systems