Description

At Wolkvox, the Information Security and Continuity Steering Committee and the Information Security Risk Leader work in a coordinated manner to ensure rigorous and effective tracking of action plans derived from the Information Security Management System (ISMS). The committee acts as the highest governance body, overseeing compliance with security objectives, while the Risk Leader is responsible for implementing, monitoring, and reporting progress on corrective and preventive actions. Together, they ensure that security initiatives are executed timely, in alignment with international standards and business needs.

Features

Role of the Information Security Committee

• Strategic Oversight: The committee periodically reviews the status of action plans, assessing their impact on security and business continuity.
• Decision-Making: Approves resources, prioritizes initiatives, and assigns responsibilities to ensure the effective implementation of actions.
• Accountability: Requires detailed reports on the progress of plans, ensuring transparency and responsibility at all levels.

Role of the Information Security Risk Leader

• Operational Management: Leads the execution of action plans, coordinating with technical and operational teams to meet established deadlines.
• Continuous Monitoring: Conducts weekly or monthly tracking (depending on criticality) of action progress, identifying deviations and applying corrective measures.
• Committee Reporting: Presents periodic reports to the committee, including compliance metrics, residual risks, and recommendations to improve ISMS effectiveness.

Tracking Mechanisms

• Regular Meetings: The committee and the Risk Leader meet regularly to review the status of action plans, analyzing progress, obstacles, and necessary adjustments.
• Key Performance Indicators (KPIs): Uses metrics such as compliance percentage, implementation time, and risk reduction to evaluate effectiveness.
• Documentation and Traceability: All actions, decisions, and follow-ups are recorded in minutes and management systems, facilitating audits and continuous improvement.