MTCS (Singapore) 6.4: Management oversight of information security

Management oversight: the MTCS places this on the Board of Directors, where ISO/IEC 27001 speaks only of the organisation. Level 1 (a to d): the Board (or its delegate) sets direction and commitment for security, allocates resources and roles, approves the approach to risk treatment, and reviews the security programme periodically; Levels 2 and 3 are the same.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in 6: Information security management – MTCS (Singapore)

6.2 Information security management system (ISMS)
6.3 Management of information security
6.5 Information security policy
6.6 Review of information security policy
6.7 Information security audits
6.8 Information security liaisons (ISL)
6.9 Acceptable usage

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All MTCS (Singapore) controls