Scribd Logo
Upload

Welcome to Scribd!

  • 12-Roles Responsibilities and Authorities Example

    Uploaded by

    carmine evangelista
    11 views2 pages
    This document outlines the roles, responsibilities, and authorities for managing an information security management system. The Managing Director has overall ownership of the management system. The IT Manager is responsible for maintaining the asset register. The IS Manager conducts risk assessments, internal audits, and maintains various plans and documentation. The BC Manager handles business continuity planning and exercises. Incident management is led by the IS Manager for information security incidents and a team for business continuity incidents.

    Original Description:

    Iso27001 sample

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    This document outlines the roles, responsibilities, and authorities for managing an information security management system. The Managing Director has overall ownership of the management system. The IT Manager is responsible for maintaining the asset register. The IS Manager conducts risk assessments, internal audits, and maintains various plans and documentation. The BC Manager handles business continuity planning and exercises. Incident management is led by the IS Manager for information security incidents and a team for business continuity incidents.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as pdf or txt
    11 views2 pages

    12-Roles Responsibilities and Authorities Example

    Uploaded by

    carmine evangelista
    This document outlines the roles, responsibilities, and authorities for managing an information security management system. The Managing Director has overall ownership of the management system. The IT Manager is responsible for maintaining the asset register. The IS Manager conducts risk assessments, internal audits, and maintains various plans and documentation. The BC Manager handles business continuity planning and exercises. Incident management is led by the IS Manager for information security incidents and a team for business continuity incidents.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as pdf or txt
    of 2

    Reference Toolkit

    12. Roles, Responsibilities and Authorities – Example

    Responsibilities and Authorities Roles

    Management System Owner Managing Director

    Ownership & Maintenance of Asset Register IT Manager

    IS Risk Assessment IS Manager


    • Undertake Risk Assessment
    • Maintenance of Risk Treatment Plan

    MS Internal Audit Process IS Manager (Lead Auditor)


    • Planning of Audit Schedule Internal Auditors
    • Undertaking audits and monitoring progress

    Business Continuity
    • Undertaking BIA and Risk Assessment BC Manager
    • Maintaining BC Plans
    BC Manager
    • Scheduling Exercising of Plans
    • Undertaking Exercises
    • Reviewing post Exercise Reports
    • Maintaining BC Wallet Card Template
    BC Manager
    Business Continuity Incident Management Members of the incident
    management team

    Information Security Incident Management


    IS Manager
    • Reporting Incidents
    • Monitoring & Closing Incidents

    ISMF /Management Review


    • MS Measurement and Metrics IS Manager
    • Objectives Managing Director
    • Scheduling meetings and taking minutes
    • Chairing meeting

    As per ISMS Master Documentation


    Maintaining MS Documentation
    Schedule
    • Creating/Updating
    IS Manager
    • Loading to SharePoint
    • Approving Documentation ISMF

    ISM02201ENGX v1.0(AD03) Jan 2022 ©The British Standards Institution 2022 1 of 2


    Reference Toolkit

    Responsibilities and Authorities Roles

    Awareness IS Manager
    • Prepare material HR Manager
    • Deliver / Monitor

    ISM02201ENGX v1.0(AD03) Jan 2022 ©The British Standards Institution 2022 2 of 2

    You might also like