Requirement
"Management shall require all personnel to apply information security in accordance with the established information security policy, topic-specific policies and procedures of the organization."[1]
Explanation
To ensure that the organization's information security policies are applied throughout the organization management cooperation is required. Managers at all levels ensure that these policies are applied in business processes.
