+ISMS.1.A6 Establishment of a Suitable Organisational Structure for Information Security [Top Management] (B)

ISMS.1.A6 Establishment of a Suitable Organisational Structure for Information Security [Top Management] (B)

An organisation MUST have a suitable higher-level organisational structure for information security. For this purpose, roles MUST be defined that will take on specific tasks to achieve the security objectives at hand. Qualified persons MUST also be appointed with sufficient resources to take on these roles. The tasks, roles, responsibilities, and competencies in security management MUST be defined and assigned in a transparent manner. Effective deputising rules MUST be in place for all the important functions within an information security organisation.

Communication channels MUST be planned, described, set up, and publicised. For all tasks and roles, it MUST be specified who will inform whom, who must be informed of which actions, and what information is to be provided.

It MUST be checked at regular intervals whether the organisational structure for information security is still adequate or needs to be adapted to new framework conditions.

1. Ħarsa ġenerali

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

Rekwiżiti

3. Regolamenti relatati

Regolamenti

Kwistjonijiet marbuta

Links
blocks G 0.18 Poor Planning or Lack of Adaptation