Designate a qualified individual responsible for overseeing, implementing, and enforcing the institution's information security program. The qualified individual may be employed by the institution, an affiliate, or a service provider.
Maintained by Gerard Blokdyk·Verified against the published standard ·Control text last updated
What else in your programme already covers this
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.