5.1 Leadership and commitment

It requires top management to demonstrate leadership and commitment for the security-management system by establishing a security policy, setting objectives, allocating resources, and integrating security into the organization's strategic direction. This engagement ensures accountability, promotes a culture of security, and drives continual improvement across all relevant processes.