SG-04—Information Security Program Content

>Control Description

The Chief Security Officer conducts a periodic staff meeting to communicate and align on relevant security threats, program performance, and resource prioritization.

Theme

Process

Type

Preventive

Policy/Standard

Information Security Management Standard

>Implementation Guidance

1. Ensure that a process is defined and documented for conducting periodic staff meetings with the Chief Security Officer. 2.Ensure that the meeting agenda consists of security threats, Information Security Management Program Performance and Resource Prioritization.

>Testing Procedure

1. Inspect and validate that a process is defined and documented for conducting periodic staff meetings with the Chief Security Officer. 2. Validate that the meeting agenda consists of security threats, Information Security Management Program Performance and Resource Prioritization for sample quarters.