+ISMS.1.A5 Contract Design When Appointing an External Chief Information Security Officer [Top Management] (B)

ISMS.1.A5 Contract Design When Appointing an External Chief Information Security Officer [Top Management] (B)

An organisation's Top Management MUST appoint an external Chief Information Security Officer (CISO) if the role of CISO cannot be filled by an internal employee. The contract with the external CISO MUST include all the tasks of the CISO and their related rights and obligations. The contract MUST include an appropriate confidentiality agreement. The contract MUST ensure that the corresponding relationship is terminated in an orderly fashion, including with regard to the handover of tasks back to the organisation in question.

1. Yleiskatsaus

1.1 Viittaukset

1.2 Tunnistetut vaatimukset

1.3 Liittyvät säädökset

2. Tunnistetut vaatimukset

Vaatimukset

3. Liittyvät säädökset

Säädökset

Linkitetyt tehtävät

Linkit
blocks G 0.18 Poor Planning or Lack of Adaptation