About the Maintain an Information Security Policy (Requireme category

Requirement 12: Maintain a policy that addresses information security for all personnel