Each states what is held, what it costs, and what would reduce it. A stated and owned exception is what a policy is for.
| When | Scope | Reviewer | Users reviewed | Reduced | Outcome |
|---|---|---|---|---|---|
| {{ h.when }} | {{ h.scope }} | {{ h.reviewer }} | {{ h.reviewed }} | {{ h.reduced }} |
Reviews are quarterly. Every reduction is recorded in the audit trail.
{{ line.text }}
Group information security policy · reviewed 14 Jun 2026
The review and its outcome are recorded in the audit trail.