# ISO27001 A.5.1

URL: /systems/trust-and-governance/criteria/iso27001/a-5-1 · Id: `criterion:iso27001:A.5.1`

> Information security policies are defined, approved by management, published, communicated and reviewed at set intervals.

Information security policies are defined, approved by management, published, communicated and reviewed at set intervals.

| Property | Value |
| --- | --- |
| Framework | ISO27001 |
| Reference | `A.5.1` |
| Satisfied by | [Policy approval](/systems/trust-and-governance/controls/policy-approval) |