ISO Independence

Answered by:

Question:

Should a requirement for the position of Information Security Officer be independence? Can the Information Security Officer also have duties associated with the finance area of the bank?

Answer:

There are not any regulatory requirements for the independence of the ISO. From a practical standpoint the ISO should be independent from systems administration responsibilities, but finance duties should not be a conflict.

First published on BankersOnline.com 2/09/09