No. ISO 27001 requires defined ownership and accountability, but not necessarily a large internal security department. Responsibilities can be distributed across existing roles provided they are documented and consistently executed.
No. ISO 27001 requires defined ownership and accountability, but not necessarily a large internal security department. Responsibilities can be distributed across existing roles provided they are documented and consistently executed.