90%
AACME
DEFENSE SYSTEMSLogo slot · brand kit
DEFENSE SYSTEMSLogo slot · brand kit
POLICY
Information Security Policy
- Document number
- POL-IS-001
- Revision
- 4.2
- Effective date
- 2026-02-01
- Classification
- Internal · Controlled document
- Owner
- Dana Whitfield, CISO
| Role | Name | Signature | Date |
|---|---|---|---|
| Prepared by | Dana Whitfield | e-signed in AegisERM | 2026-01-12 |
| Reviewed by | Marcus Lee | e-signed in AegisERM | 2026-01-20 |
| Approved by | Priya Natarajan | e-signed in AegisERM | 2026-01-28 |
CONTROLLED COPY
DEFENSE SYSTEMSInformation Security PolicyPOL-IS-001 · Rev 4.2
1. Purpose and scope
Acme Defense Systems protects the confidentiality, integrity and availability of company, customer and Controlled Unclassified Information. This policy sets management direction for the ISMS under ISO/IEC 27001:2022 and the security requirements of NIST SP 800-171.
- Information security objectives are set annually by top management and reviewed at management review.
- All personnel acknowledge this policy on hire and annually thereafter.
- Topic-specific policies (access control, cryptography, supplier security) implement this policy.
2. Revision history
| Rev | Date | Change | Reason |
|---|---|---|---|
| Current | 2026-01-28 | Annual review; wording | Scheduled review |
| Previous | 2025-01-30 | Scope extended to CUI enclave | CTX-04 scope change |
CONTROLLED COPY