ISO/IEC 27001:2022 assigns accountability for the information security policy to top management. Top management must ensure that the policy and objectives are established and are compatible with the strategic direction of the organization. Top management is also responsible for promoting and supporting compliance with the ISMS requirements throughout the organization. Therefore, option B is correct.
=======
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit