Resourcing

Adequate resources are allocated and in place to manage the information security management system including permanent roles and external service providers