Information security roles and responsibilities
A.5.2
-
Last updated
Applicable
Catalog reference
Clearly define and assign who is responsible for which aspects of information security. Everyone with a stake should know what is expected of them and who to escalate to.
Narrative — how we satisfy this requirement
Security duties are written into job descriptions and into the Roles register, where each Role has a description and named holders.