ORP.5.A4 Design and Organisation of Compliance Management [Top Management] (S)

A process for identifying all relevant statutory, contractual, and additional provisions that impact information security management MUST be established within organisations. Suitable processes and organisational structures SHOULD be established to ensure an overview of the various statutory requirements for the individual areas of a given organisation based on its identification of and compliance with the legal framework at hand. Persons responsible for compliance management SHOULD be appointed for this purpose.

An organisation's Compliance Manager and Chief Information Security Officer (CISO) SHOULD exchange information on a regular basis. They SHOULD integrate security requirements into compliance management, translate security-related requirements into security safeguards, and monitor their implementation together.

1. Overzicht

1.1 Referenties

1.2 Geïdentificeerde eisen

1.3 Gerelateerde regelingen

2. Geïdentificeerde eisen

3. Gerelateerde regelingen

Gekoppelde issues

• BSI -

  Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)