+ORP.5.A4 Design and Organisation of Compliance Management [Top Management] (S)

ORP.5.A4 Design and Organisation of Compliance Management [Top Management] (S)

A process for identifying all relevant statutory, contractual, and additional provisions that impact information security management MUST be established within organisations. Suitable processes and organisational structures SHOULD be established to ensure an overview of the various statutory requirements for the individual areas of a given organisation based on its identification of and compliance with the legal framework at hand. Persons responsible for compliance management SHOULD be appointed for this purpose.

An organisation's Compliance Manager and Chief Information Security Officer (CISO) SHOULD exchange information on a regular basis. They SHOULD integrate security requirements into compliance management, translate security-related requirements into security safeguards, and monitor their implementation together.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.29 Violations of Laws or Regulations