Installing a logging system that enables changes in a system to be recognized

Shutting down all internet traffic after a hacker has gained access to the company systems

Putting sensitive information in a safe

Classifying a risk as acceptable because the cost of addressing the threat is higher than the value of the information at risk

A code of conduct specifies how employees are expected to conduct themselves and is the same for all companies.

A code of conduct is a standard part of a labor contract.

A code of conduct differs from company to company and specifies, among other things, the rules of behavior with regard to the usage of information systems.

Restriction of access to information

Return of assets

Management of access rights with special privileges

Withdrawal or adaptation of access rights

how the InfoSec-objectives will be reached

which InfoSec-controls have been selected and taken

what the implementation-planning of the information security management system is

which Information Security-procedures are selected