+ISMS.1.A5 Contract Design When Appointing an External Chief Information Security Officer [Top Management] (B)

ISMS.1.A5 Contract Design When Appointing an External Chief Information Security Officer [Top Management] (B)

An organisation's Top Management MUST appoint an external Chief Information Security Officer (CISO) if the role of CISO cannot be filled by an internal employee. The contract with the external CISO MUST include all the tasks of the CISO and their related rights and obligations. The contract MUST include an appropriate confidentiality agreement. The contract MUST ensure that the corresponding relationship is terminated in an orderly fashion, including with regard to the handover of tasks back to the organisation in question.

1. Visão geral

Título Norma

1.1 Referências

1.2 Requisitos identificados

1.3 Regulamentos relacionados

2. Requisitos identificados

Requisitos
Fonte Requisito

3. Regulamentos relacionados

Regulamentos
Fonte Regulamentação

Pedidos ligados

Ligações
Tipo de ligação Pedido
blocks G 0.18 Poor Planning or Lack of Adaptation