|
+ISMS.1.A9 Integrating Information Security into Organisation-Wide Procedures and Processes [Top Management] (B) |
1. OverviewISMS.1.A9 Integrating Information Security into Organisation-Wide Procedures and Processes [Top Management] (B)Information security MUST be integrated into all business processes and specialised tasks. Inso doing, it MUST be ensured that all necessary security aspects are not only taken into account in new processes and projects, but also in ongoing activities. The Chief Information Security Officer MUST be adequately involved in making security-relevant decisions. Moreover, information security SHOULD be coordinated with other areas of an organisation that deal with security and risk management.
1.1 References1.2 Identified Requirements1.2 Related Regulation2. Identified Requirements
3. Related Regulations
|