#iso27001/2013
### ISO 27001 A 16.1.3 Reporting information security weaknesses
Employees and contractors using the organization’s information systems and services shall be required to note and report any observed or suspected information security weaknesses in systems or services.