Electronic Commerce Services – The MisInterpreted Controls?
Having implemented ISO 27001 Information Security Management Systems, and spoken to others who have, there is a group of controls from Annex A that seems to be regularly excluded. A10.9 Electronic Commerce Services, has the objective “To ensure the security…