Issue

Person

Responsibility

Result of Request

Resource

Needed

Time

Frame

Strategic1 (Governmental)

Upper

Management

Develop regulations to promote cybersecurity. Enforcing regulations of cybersecurity standards.

Promote cybersecurity awareness in education.

Approvals

Long Term (06 - 12 months)

Strategic 2 (CEO)

Upper

Management

Maintaining compliance with the standard. Plan to manage the change. Provide the necessary resources for compliance.

Approvals

Budget

Long Term (06 - 12 months)

Strategic 3 (CTO/CIO)

Upper

Management

Ensure ISO 27001 compliance.

Taking corrective action for non-compliance. Inform stakeholders of the level of compliance on regular basis.

Budget

Skilled Workers

Facilities, Safety.

Medium Term (03 - 6 months)

Tactical 1

HR Manager

Selecting the right candidates for duties. Train the cybersecurity team appropriately. Employees coaching to help improvement.

Skilled Workers

Facilities, Utilities

Safety.

Medium Term (03 - 6 months)

Tactical 3

IT Manager

Ensure IT policies comply with standards. Ensure IT systems comply with IT policies.

Conducting security vulnerability assessments. Monitor compliance with standards regularly. Develop Incident Response Team.

Qualified Workers

Facilities, Utilities

Equipment, Safety

Insurance.

Medium Term (03 - 6 months)

Operational 2

Team Leader

Understand and communicate the standard. Providing training on security awareness. Continuous improvement cybersecurity culture. Solving problems and resolving conflicts. Goal management.

Qualified Workers

Facilities, Utilities

Safety, Insurance.

Short Term (01 - 03 months)

Operational 3

Auditors

Conducting assessments with relevant IT polices and report non-compliance issues to senior.

Management and take action to remediate security vulnerability finding.

Qualified Workers

Facilities, Utilities

Safety.

Short Term (01 - 03 months)