+ISMS.1.A4 Appointment of a Chief Information Security Officer [Top Management] (B)

ISMS.1.A4 Appointment of a Chief Information Security Officer [Top Management] (B)

An organisation's Top Management MUST appoint a Chief Information Security Officer (CISO). The CISO MUST promote information security in the organisation and help steer and coordinate the security process.

The Top Management MUST provide the CISO with adequate resources. The Top Management MUST allow the CISO to report directly to it when required.

The CISO MUST be involved at an early stage in all larger projects and in the introduction of new applications and IT systems.

1. Översikt

1.1 Referenser

1.2 Identifierade krav

1.3 Relaterade regleringar

2. Identifierade krav

Krav

3. Relaterade regleringar

Regleringar

Länkade ärenden

Länkar
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.27 Lack of Resources