Productiv

Formal organizational structures, including governance frameworks and reporting lines, are established and documented to ensure clear accountability and operational efficiency.

Organizational structures and defined roles are maintained in the platform and made available to employees upon request to ensure accessibility and transparency.

GV.OC-01: The organizational mission is understood and informs cybersecurity risk management

GV.OC-04: Critical objectives, capabilities, and services that stakeholders depend on or expect from the organization are understood and communicated

5.1 Information security policy and topic-specific policies shall be defined, approved by management, published, communicated to, and acknowledged by relevant personnel and relevant interested parties, and reviewed at planned intervals and if significant changes occur

5.18 Access Rights - Access rights to information and other associated assets shall be provisioned, reviewed, modified, and removed in accordance with the organization's topic-specific policy on and rules for access control.

Defines ESAs??? supervisory and coordinating roles.