4.1.2.1
Leadership
Leadership – Commitment to the Cyber Security Program – Top management shall demonstrate their commitment to the cyber security program by:
- a) ensuring the cyber security policy and objectives are established and are aligned with the strategic direction of the organization;
- b) ensuring that the resources needed for the cyber security program are available and are aligned with the cyber security policy and objectives;
- c) communicating the importance of effective cyber security and of conforming to the cyber security program requirements;
- d) establishing cybersecurity program metrics and tracking progress; and supporting other relevant management roles to demonstrate their leadership as it applies to their areas of responsibility.
- e) supporting other relevant management roles to demonstrate their leadership as it applies to their areas of responsibility
-
5.1 Security Policies: The Information Security and other related policies should be developed and after management approval, communicated to relevant personnel and reviewed at regular intervals.
-
3.2.1 Ensure that managers, systems administrators, and users of organizational systems are made aware of the security risks associated with their activities and of the applicable policies, standards, and procedures related to the security of those systems.
-
3.2.1 Ensure that managers, systems administrators, and users of organizational systems are made aware of the security risks associated with their activities and of the applicable policies, standards, and procedures related to the security of those systems.