EIOPA Guidelines on ICT Security and Governance (EIOPA-BoS-20/600) EIOPA-ICTSG-GL.7: Information security function

Undertakings establish an information security function with responsibilities assigned to a designated person, independent and segregated from ICT development and operations and reporting to the AMSB, tasked with supporting the policy, advising the AMSB, monitoring implementation, ensuring provider compliance, awareness, and incident coordination.