COM-04.02AC

The responsible business units of the cloud service provider report at least annually to the top management on the the status and effectiveness of the policies and procedures that are relevant to the top management review of the information security management system. This reporting includes at least:

1. Implemented changes to address cybersecurity risks for the topic addressed in the policy or procedure;

2. Information security incidents for the topic addressed in the policy or procedure and the follow-up;

3. Performance of the internal controls regarding information security for the topic addressed in the policy or procedure; and

4. Planned changes for the topic addressed in the policy or procedure to address cybersecurity risks and information security and cybersecurity.

1. Resumen

1.1 Referencias

1.2 Requisitos identificados

1.3 Regulaciones relacionadas

2. Requisitos identificados

3. Regulaciones relacionadas

Incidencias vinculadas

• BSI -

  Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)