Manuals and Operating Procedures that detail how to work with Information Systems and Services in a secure manner are available and communicated to end-users. Understanding of the operating procedures is verified and adhering to these procedures is monitored. Appropriate measures are taken when operating procedures are not followed.
Specification
These manuals explain step-by-step how the user should operate the system safely. Use screenshots where possible.
ISO 27001 & 27002:2022
A5.6,
A5.37,
A6.3
SURF toetsingskader informatiebeveiliging (NBA-volwassenheidsmodel)
HR.05 Knowledge sharing