Citation Matching

Citation Reference: 2.1.1. Recommended measures (e)

Citation Guidance: Senior management appoints a person with sufficient knowledge and experience in cybersecurity as the Chief Information Security Officer (e.g., CISO) or equivalent position, who is in a position to report directly to senior management on a daily basis. Establish a relationship that enables direct communication between the CISO and top management during both normal operations and emergencies. To that end, senior management provides the CISO with the necessary support, authority, and resources to fulfill their role. Additionally, business units appoint responsible personnel with sufficient cybersecurity knowledge and experience to facilitate smooth coordination with the CISO.