Requirement 12.6.2

Require employees to acknowledge at least annually that they have read and understood the company’s security policy and procedures.