iso27diy-corp/Corpus/Sparks/Organizing Cybersecurity.md

… beyond the project phase

e.g. CISO, DPO, CIO, Threat Management Team, Incident Response Team, Red/Blue/Purple Team, telephone tree (think of Finnish session from ECPC)

Read: https://www.philvenables.com/post/building-balanced-security-teams-the-rule-of-thirds

Related:

• Checklist for auditing Cyber Operations

Relevant ISO 27001 clauses/controls:

• ISO 27001 C 5.3 Organizational roles, responsibilities and authorities
• ISO 27001 A 6.1 Internal organization