Clause 5 - Leadership

Clause 5 outlines the responsibilities of top-management in establishing, implementing and maintaining the security management system. It requires leadership to define the security policy, assign roles, ensure resources, and promote a culture of continual improvement and risk awareness.