Security Policy: Difference between revisions

Jump to navigation Jump to search
Line 66: Line 66:
Top management shall ensure that the responsibilities and authorities for roles relevant to information security are assigned and communicated. Top management shall assign the responsibility and authority for:
Top management shall ensure that the responsibilities and authorities for roles relevant to information security are assigned and communicated. Top management shall assign the responsibility and authority for:


#ensuring that the information security management system conforms to the requirements of this International Standard; and
#Ensuring that the information security management system conforms to the requirements of this International Standard; and
 
#Reporting on the performance of the information security management system to top management.
#reporting on the performance of the information security management system to top management.


   <small>NOTE Top management may also assign responsibilities and authorities for reporting performance of the information security management system within the organization. </small>
   <small>NOTE Top management may also assign responsibilities and authorities for reporting performance of the information security management system within the organization. </small>


   Link to [https://docs.google.com/spreadsheets/d/1X9kugLgmjFj28TRinZK6cPpqtxVx1slDpIuRfv5VL1s/edit?usp=sharing Security Team - Roles, Responsibility and Workload]  
   Link to [https://docs.google.com/spreadsheets/d/1X9kugLgmjFj28TRinZK6cPpqtxVx1slDpIuRfv5VL1s/edit?usp=sharing Security Team - Roles, Responsibility and Workload]


== Planning ==
== Planning ==