← ISO 27001 Annex A in plain English

A.5.36 A.5

Organizational / A.5.36

Checking compliance with policies and standards

Think of it likeActually checking the back door is locked, rather than assuming it is.

In plain English

The family checks that its own rules are being followed in practice, since a rule nobody verifies is a rule nobody has to keep.

Related CSF and CIS controls (unofficial mapping)