1.2.3 At least one person shall report directly to the management bodies on matters of network and …

Requirement

At least one person shall report directly to the management bodies on matters of network and information system security.

Guidance

• Appoint a person (e.g. chief information security officer or information security manager) responsible for overseeing network and information security matters.
• Make sure that this role is recognized and duly authorized by management bodies.

Examples of evidence

• Up-to-date documentation of the structure of security role assignments and responsibilities.
• Minutes from meetings with the management.
• Evidence of business decisions made (e.g. investments in cybersecurity).

1. Przegląd

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

3. Powiązane regulacje

Powiązane zgłoszenia

• ENISA -