Essential CISM: Updated for the 15th Edition CISM Review Manual

by Phil Martin

In some organizations, effective practices have evolved that are not contained in a written policy. In these cases, the practices themselves should serve as a basis for policy and standards.