1.2.3 At least one person shall report directly to the management bodies on matters of network and …

Requirement

At least one person shall report directly to the management bodies on matters of network and information system security.

Guidance

• Appoint a person (e.g. chief information security officer or information security manager) responsible for overseeing network and information security matters.
• Make sure that this role is recognized and duly authorized by management bodies.

Examples of evidence

• Up-to-date documentation of the structure of security role assignments and responsibilities.
• Minutes from meetings with the management.
• Evidence of business decisions made (e.g. investments in cybersecurity).

1. Prezentare generală

1.1 Referințe

1.2 Cerințe identificate

1.3 Reglementări asociate

2. Cerințe identificate

3. Reglementări asociate

Tichete legate

• ENISA -