ISO 27001 Understanding The Needs And Expectations of Interested Parties is an ISO 27001 clause and a requirement of ISO/IEC 27001:2022 Information security, cybersecurity and privacy protection — Information security management systems to get ISO 27001 certification.
What is ISO 27001 Clause 5.3?
Top management shall ensure that the responsibilities and authorities for roles relevant to information security are assigned and communicated within the organisation.
Top management shall assign the responsibility and authority for:
a) ensuring that the information security management system conforms to the requirements of this document
b) reporting on the performance of the information security management system to top management.
ISO 27001:2022 Clause 5.3 Organisational roles, responsibilities and authorities