Is Yefund's development of communication protocols acceptable?

ISO/IEC 27001:2022 Clause 7.4 requires that organizations determine both internal and external communications relevant to the ISMS. This includes what to communicate, when, with whom, and how, to ensure stakeholders—including clients and regulators—are properly informed. Focusing only on internal communications is noncompliant.

“The organization shall determine the need for internal and external communications relevant to the information security management system, including on what to communicate, when, with whom, and how.”

— ISO/IEC 27001:2022, Clause 7.4