Resourcing

Adequate resources are allocated and in place to manage information security systems including permanent roles and external suppliers