Gap assessment
Answer honestly based on what happens today. You can add evidence and return at any time.
All changes saved
5 of 10 answered50% complete
Assessment areas
Do you have a written information security policy that is reviewed regularly?
Why this matters
A current policy gives your team a shared baseline and shows reviewers that security is actively governed.