Clause 7: Support
1. Objective
The objective of this control framework is to establish the supporting capabilities required to sustain the ISMS by:
- Determining and provisioning the necessary resources for the establishment, implementation, maintenance, and continual improvement of the framework (Clause 7.1)
- Verifying and validating the professional competence of personnel performing work affecting security performance (Clause 7.2)
- Cultivating and maintaining an active, organization-wide culture of information security awareness (Clause 7.3)
- Defining the internal and external communication requirements relevant to information security (Clause 7.4)
- Controlling, maintaining, and protecting documented information required by the ISMS (Clause 7.5)
2. Scope
The scope of this document aligns directly with the overall scope of the ISMS as defined in Clause 4 (Context of the Organization).
3. Availability and Access
This document is:
- Required reading for all anDREa employees and contractors.
- Available to all authorized interested parties and platform users via our public ISMS repository.