+ISMS.1.A4 Appointment of a Chief Information Security Officer [Top Management] (B)

ISMS.1.A4 Appointment of a Chief Information Security Officer [Top Management] (B)

An organisation's Top Management MUST appoint a Chief Information Security Officer (CISO). The CISO MUST promote information security in the organisation and help steer and coordinate the security process.

The Top Management MUST provide the CISO with adequate resources. The Top Management MUST allow the CISO to report directly to it when required.

The CISO MUST be involved at an early stage in all larger projects and in the introduction of new applications and IT systems.

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.27 Lack of Resources