{"id":6409,"date":"2021-02-26T11:57:11","date_gmt":"2021-02-26T10:57:11","guid":{"rendered":"https:\/\/edorteam.com\/what-are-the-functions-of-the-information-security-officer-or-ciso\/"},"modified":"2026-05-04T17:28:17","modified_gmt":"2026-05-04T15:28:17","slug":"what-are-the-functions-of-the-information-security-officer-or-ciso","status":"publish","type":"post","link":"https:\/\/nova.edorteam.com\/en\/what-are-the-functions-of-the-information-security-officer-or-ciso\/","title":{"rendered":"What are the functions of the Information Security Officer or CISO?"},"content":{"rendered":"

At our previous entry<\/a><\/strong> We inform you of the entry into force of Royal Decree 43\/2021, by which all essential service companies and digital service providers must designate their Responsible for Information Security<\/strong> or CISO<\/strong> ( Chief Information Security Officer<\/em> ).<\/p>\n

Broadly speaking, this figure must be designated no later than April 27 of this year, and will be in charge of analyzing the state of cybersecurity of your company and presenting the relevant authorities Statement of Applicability<\/strong> , in addition to ensure compliance<\/strong> a posteriori (so it will not be a temporary figure, far from it).<\/p>\n

On July 27, the deadline for submitting the Declaration of Applicability ends. As of this date, companies that do not comply with these obligations may be inspected and sanctioned.<\/p>\n

The objective of this regulation is very clear: that essential companies achieve an adequate level of information security<\/strong> , considering that, being essential service companies such as energy, health, waste management or food, they must minimize their risks of suffering a cyber-incident that paralyzes their work activity.<\/p>\n

Last week we talked to you in detail about the companies affected by RD 43\/2021<\/a><\/strong> . This week we want to explain the functions of the CISO or Head of Security.<\/p>\n<\/div><\/div><\/div><\/div><\/div>

Questions and answers about the Information Security Officer or CISO<\/h2>\n

 <\/p>\n

What does a CISO or Security Manager do?<\/h3>\n

Its functions are contained in article 7 of RD 43\/2021, which establishes:<\/p>\n

    \n
  1. Act as a point of contact with the competent authority in matters of supervision of the security requirements of networks and information systems.<\/li>\n
  2. Act as a specialized point of contact for the coordination of incident management with the reference CSIRT.<\/li>\n
  3. The following functions will be developed under your responsibility, among others:<\/li>\n<\/ol>\n