← ISO 27001 Annex A in plain English

A.6.4 A.6

People / A.6.4

A disciplinary process for security violations

Think of it likeAgreeing in advance what happens if someone keeps leaving the door unlocked.

In plain English

The family is clear about the consequences of breaking the rules, because a rule with no consequence is advice.

Related CSF and CIS controls (unofficial mapping)