The Information Security Manager (ISM) is the person who will be responsible for the implementation and maintenance of the Information Security Management System. They ensure all necessary resources are available to the organization.

This is typically the CISO, CTO, or VP of Engineering.

We highly recommend appointing someone with decision making authority and system administrative access to help drive SOC 2 and ISO 27001 efforts forward.

Configuring your Information Security Manager

Follow the instructions below to configure your Information Security Manager in the Secureframe platform.

1. Head to the top right corner of Secureframe and click on your Profile Icon
2. Choose Company Settings, then the Configurations Tabs
3. Now chose your Information Security Manager from the dropdown and confirm.

Configuring your Information Security Team

Much like above, An Information Security Team governs cybersecurity and privacy controls and contributes to their effectiveness.

Follow the instructions below to assign your Information Security Team using Groups in the Secureframe platform.

1. Head to Personnel, then click on the settings icon in the upper right corner
2. Click on the Groups tab, then Create new groups
3. You can name your group Information Security Team and then apply all relevant members to that new group
4. 

Frequently Asked Questions (FAQ)

How do I pass the Information Security Manager role tests in Secureframe?

• In order to pass this test, you will need to apply the Information Security Manager under the Account Settings. You can find instructions here.