Organisational roles, responsibilities and authorities
5.3
-
Last updated
Mandatory
Catalog reference
Assign and communicate responsibility and authority for the ISMS, including who ensures it conforms to the standard and who reports on its performance to top management.
Narrative — how we satisfy this requirement
The Roles register names the ISMS Manager, Internal Auditor, Data Protection Officer, and the other security Roles, each with holders and competencies.
Review
On trackNext review is 10/27/2027 — no urgency right now.
- Review cadence
- Every 365 days
- Last reviewed
- Next review due