Clause 5.2.f This clause’s requirements can be satisfied by putting the organization’s ISMS policy on its website.