Information Security Handbook

Define roles and responsibilities

Establishing roles and responsibilities is very important to ensure a smooth planning process for the organization. These roles and responsibilities will be the ones that will be assigned specific information security functions in future policies and procedures.

Example roles and responsibilities you can include in your information security program plan include:

• Executive management: Executive managers are senior business managers who own the IT security risk for the organization and are responsible for overseeing information security for their respective areas of responsibility and ensuring compliance with all information security policies. Such responsibilities include, but are not limited to:
  • Ensure ...