There should be communication channels established to disseminate and receive information regarding information security matters.
Control Type: Technical/Administrative
Control Function: Preventive
Description: To ensure that an organization operates smoothly, there needs to be good communication with all stakeholders, both internal and external. This is especially important in situations where the entire workplace needs to be informed of new developments, incidents, or changes. Communication is also critical in scenarios that require multiple roles to come together quickly to address, avoid, and/or eliminate a threat.
Organizations should have multiple channels on multiple platforms. There should be a mix of online platforms like encrypted Instant Messaging Services, email, and company intranets, as well as more traditional channels like telephony and fax.
Examples of communication channels for work environments include:
- Chats such as Google Chat and Signal
- Video conferencing tools such as Zoom and Teams
- Email groups and mailing lists
- Internal phone systems
- Intranet sites on platforms like Sharepoint
- Emergency notification applications such as Alertus
- SMS notifications