Reporting

The organisation’s commitment to appropriate information security practices and its adherence to regulatory requirements is monitored and reported via a formal system to the board and key stakeholders