Security Policies Reviewed & Approved

Are your organisation's information security policies reviewed and approved by senior management at least annually?

Yes.