Communication

The organisation clearly communicates its expectations of employees concerning information security management and clearly articulates its position through internal/external communications