PR.IP-5

Standard

Standard Version

NIST CSF

(v1.1)

Information Protection Processes and Procedures (PR.IP): Security policies (that address purpose, scope, roles, responsibilities, management commitment, and coordination among organizational entities), processes, and procedures are maintained and used to manage protection of information systems and assets.

Policy and regulations regarding the physical operating environment for organizational assets are met