Scenario:Evergreen tailored the format and naming convention of their information security policy to align with...

ISO/IEC 27002:2022 Clause 5.1 (Policies for information security) states:

“The organization can determine the formats and names of these policy documents that meet the organization’s needs. In some organizations, the information security policy and topic-specific policies can be in a single document.”

There is no requirement to use a universal or predefined template. What’s important is that the policies are documented, communicated, approved by top management, and support the ISMS objectives.