#iso27001/2022/EN
## 5.1 Leadership and commitment

Top management shall demonstrate leadership and commitment with respect to the information security management system by:

a\) ensuring the information security policy and the information security objectives are established and are compatible with the strategic direction of the organization;

b\) ensuring the integration of the information security management system requirements into the organization's processes;

c\) ensuring that the resources needed for the information security management system are available;

d\) communicating the importance of effective information security management and of conforming to the information security management system requirements;

e\) ensuring that the information security management system achieves its intended outcome(s);

f\) directing and supporting persons to contribute to the effectiveness of the information security management system;

g\) promoting continual improvement; and

h\) supporting other relevant management roles to demonstrate their leadership as it applies to their areas of responsibility.

NOTE Reference to "business" in this document can be interpreted broadly to mean those activities that are core to the purposes of the organization's existence.