EM-03—Organizational Structure

>Control Description

Organization Management ensures that its organization is aligned with the corporate strategy by assigning key managers with responsibilities to execute the corporate strategy.

Theme

Process

Type

Preventive

Policy/Standard

Information Systems Operations Policy

>Implementation Guidance

1. Ensure the organization has defined and documented a corporate strategy including the responsibilities for key managers. 2. Ensure the strategy is available to the respective stakeholder and is communicated effectively.

>Testing Procedure

1. Validate and ensure that the organization has established and documented the strategy with the responsibilities for key managers. 2. Inspect whether the strategy is available to the respective stakeholder and is communicated effectively.