👤 ISM Governance

Automatically generated excerpt from nestr.io on 2026-08-28 15:55 UTC, view all live information here.

Circle (Delegator)

🔘 Information Security

Role Keepers

André Keller

Purpose

VSHN operates an ISMS to ensure adherence to Information Security throughout the company. VSHN’s Top Management takes full accountability for the effectiveness of the ISMS. We are committed to ensuring the confidentiality, integrity, and availability of all information assets by integrating security into our core business processes and providing all necessary resources. The ISM Governance role, appointed by the Board, leads this commitment to support VSHN’s strategic goals and drive continual improvement.

The ISM Governance role is appointed by VSHN via its board.

Accountabilities (Key Responsibilities)

  • Promoting a culture of improvement and ensuring the ISMS achieves its intended outcomes.

  • Communicating the importance of information security and supporting VSHNeers to contribute to the ISMS’s success.

  • Integrating security requirements into VSHN’s business processes and ensuring all necessary resources (budget, people, tools) are available.

  • Ensuring the Information Security Policy and objectives are established and aligned with VSHN’s strategic direction.

  • Taking ultimate responsibility for the effectiveness and performance of the ISMS.

Stakeholders and Key Deliverables

CISO

  • Support during internal and external audits

  • Defined and reviewed objectives (OKRs)

VSHN Board

  • Report of annual Management Review with the CISO according to ISO/IEC 27001 section 9.1

  • Reviewed role of the CISO

VSHN

  • Approved Information Security Policy

  • Documented acceptance of residual Information Security risks from risk assessment

Teams and VSHNeers

  • Escalation point for Information Security Incidents and stand-in for CISO