The plan defined by a company which sets the information security objectives and measures to mitigate risks, define control objectives, establish metrics and benchmarks while complying with legal, internal and contractual requirements.
DADOS FORNECIDOS PELA ESCO (COMISSÃO EUROPEIA) E O*NET (DEPARTAMENTO DO TRABALHO DOS EUA)