T4.1.1 - COMMUNICATIONS POLICY Implementation Guidance
The entity shall establish a communications policy to guide the protection of information in transit.
Back to T4.1.1 - P3 - COMMMUNICATIONS POLICY
The communications policy facilitates the implementation of the associated controls to secure information in transit and information sharing. The policy can, for example, contain in addition to the required sub-controls:
- A. Information transfer procedures
- B. Physical media transfer procedures
- C. Electronic messaging
- D. Information sharing protection
- E. Network security management
The communications policy can be included as part of the general information security policy, in a single policy document, or can be represented by multiple policies reflecting the complex nature of certain entities
