1.2.3 At least one person shall report directly to the management bodies on matters of network and …

Requirement

At least one person shall report directly to the management bodies on matters of network and information system security.

Guidance

• Appoint a person (e.g. chief information security officer or information security manager) responsible for overseeing network and information security matters.
• Make sure that this role is recognized and duly authorized by management bodies.

Examples of evidence

• Up-to-date documentation of the structure of security role assignments and responsibilities.
• Minutes from meetings with the management.
• Evidence of business decisions made (e.g. investments in cybersecurity).

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

3. Regolamentazioni correlate

Ticket collegati

• ENISA -