Organisational roles, responsibilities and authorities
5.3
-
Last updated
Mandatory
Catalog reference
Assign and communicate responsibility and authority for the ISMS, including who ensures it conforms to the standard and who reports on its performance to top management.
Narrative — how we satisfy this requirement
The Roles register names the ISMS Manager, Internal Auditor, Data Protection Officer, and the other security Roles, each with holders and competencies.