SG-11—Security Roles and Responsibilities

1. Inspect Organization's Information Security Management Standard to determine whether it was communicated and defined information security roles and responsibilities for the governance of information security within Organization. 2. Observed Organization's corporate intranet to determine whether the Information Security Management Standard is communicated to the company. 3. Inspect the most recent ISMS Steering Committee Meeting minutes to determine the participation from the security leadership team, and establishment and communication of security goals and milestones.