graphgrc

SCF - GOV-04 - Assigned Cybersecurity & Data Protection Responsibilities

Mechanisms exist to assign one or more qualified individuals with the mission and resources to centrally-manage, coordinate, develop, implement and maintain an enterprise-wide cybersecurity & data protection program.

Mapped framework controls

ISO 27001

• 5.1.f
• 5.1.h
• 5.3.a
• 5.3.b
• 5.3

ISO 27002

• A.5.2

SOC 2

• CC1.1
• CC1.3

Control questions

Does the organization assign one or more qualified individuals with the mission and resources to centrally-manage, coordinate, develop, implement and maintain an enterprise-wide cybersecurity & data protection program?

This site is open source. Improve this page.