1.2.3 At least one person shall report directly to the management bodies on matters of network and …

Requirement

At least one person shall report directly to the management bodies on matters of network and information system security.

Guidance

• Appoint a person (e.g. chief information security officer or information security manager) responsible for overseeing network and information security matters.
• Make sure that this role is recognized and duly authorized by management bodies.

Examples of evidence

• Up-to-date documentation of the structure of security role assignments and responsibilities.
• Minutes from meetings with the management.
• Evidence of business decisions made (e.g. investments in cybersecurity).

1. Forbhreathnú

1.1 Tagairtí

1.2 Ceanglais aitheanta

1.3 Rialacháin ghaolmhara

2. Ceanglais aitheanta

3. Rialacháin ghaolmhara

Saincheisteanna nasctha

• ENISA -