Related to:
- [ISO27DIY Risk Analysis Card template](../ISO27DIY%20Risk%20Analysis%20Card%20template.md)
- [Policy Card Example for Access to Software Applications](../../../../../../AuditGlue/Policy%20Card%20Example%20for%20Access%20to%20Software%20Applications.md)

*Note: onder NIS2 moeten managers ook de "gevolgen van cyberveiligheidsmaatregelen voor hun organisatie" kunnen beoordelen.*

>Format for Policy Card note-tile: ISO27DIY Policy for xxx

## Version Control

| Type            | Value |
| --------------- | ----- |
| Version number: | x.xx  |
| Version date:   | x.xx  |
| Document owner: | name  |
| Approved by:    | name  |
| Approved on:    | date  |
| Next review:    | date  |

The Document Owner is responsible for development and implementation of the policy.

- [ ] Check Standard on documentation and ownership
- [ ] Check 'responsible' vs. 'accountable' / [Responsibility assignment matrices](../../../../../Literature%20notes/Responsibility%20assignment%20matrices.md)

## Policy subject

> 

## Relevant ISO 27001 topics
## Goal
>described in terms of risk mitigation

## Description
>To mitigate the risk of X, controls A, B and C will be implemented on asset Y by Responsible Z. The effectiveness will be measured through P and will be evaluated by Q according to method R, following planning S. 

Note: also the Annex A category of controls: technical, human, organizational, physical ...
## Scope
>E.g. organization as a whole vs. topic-specific: certain business activities, organizational units, or the implementation of specific controls.
>Also define Exemptions and Exceptions.

## Associated Risks

## Tags
>- Addressed ISO 27001 controls & clauses.
>- Phase 

## Responsibilities
For writing the policy 
For implementing the policy (Control Owner)

## Measuring and monitoring
How / Who / When
Documented in -> location/document

## Evaluation
- How
- By whom
- When ("at planned intervals or if significant changes occur": review frequency)

Documented in -> location/document

## Change procedure
incl getting approval

## Related policies
- x
- y

## Approved
Name: | name
--- | ---
Signature: | signature
Date: | date
