M.4) Inform employees

Category:        Organizational, Initial, Periodic

Responsible:   CTO, CSR, PSR

Effort:              10 minutes once a week in team meeting

Based on:       [1] M 2.198 / M 2.393 (Finding during Rentog implementation)

Initial

CTO informs all employees of the company in the next team meeting that from now on information security is in focus. The CTO needs to make sure that everyone knows the difference between product and corporate security and that all employees know which person is responsible for the different security topics.

Periodical

CSR and PSR periodically inform employees on upcoming security topics in the team meetings.

 

References

[1] Bundesamt für Sicherheit in der Informationstechnik, “BSI IT Grundschutz Kataloge,” [Online]. Available: https://www.bsi.bund.de/DE/Themen/ITGrundschutz/ITGrundschutzKataloge/Inhalt/_content/allgemein/einstieg/01001.html. [Accessed 04 04 2016].

 

Disclaimer

The information contained in this website is for general information purposes only. You can find more information about the accuracy of the information on the disclaimer and terms and conditions pages.