Internal and External Communication Plan

Internal communication regarding this ISMS will be conducted as described below:

What to communicate	Whom shall communicate	Whom to communicate to	When to communicate	How to communicate
Changes to Information Security Management Policy Changes to Risk Management, Information Security, and Business Continuity Policies Changes to Software Development Policy Changes to Personnel and Safety Policies	Information Security Lead or CTO	Employees Contractors Leadership team Clients Prospects	Ad-hoc	Via FundApps policy portal
Risks above risk tolerance	Information Security Lead or CTO	Leadership team Risk owner	Ad-hoc	Via Risk Register
Findings from internal or external audits	Information Security Lead or CTO	Employees Leadership team	Ad-hoc	ShortCut and/or Notion
Availability of FundApps' platform	Information Security Lead or CTO	Employees Contractors Leadership team Clients Prospects	Daily	Via FundApps' status page
Changes in security and privacy related contractual requirements	Information Security Lead or CTO	Contractors Providers	Ad-hoc	Via email