POLICY.

24 internal policies versioned across 6 domains. 6 last reviewed more than 12 months ago. 2 reference standards that have been superseded.

A policy nobody re-read is a policy that drifted.

PD-014 · data-classification v2.1 OUTDATED

Last review 2023-11. Cites ISO 27001:2013 (now :2022).

Re-issue v3.0 with ISO 27001:2022 references and sign-off.