A.6.4

Disciplinary process

people control

What it means

Have a formal, communicated process for handling security-policy violations.

Get A.6.4 into your SoA automatically

StandardOS pre-fills this control's applicability and justification from a seven-question profile, then tracks its implementation.