The Senior Information Risk Owner (SIRO) #

The SIRO is a member of the UCL University Management Committee and chair of the Information Risk and Governance Committee.

The SIRO

Must understand how the strategic goals of the organisation may be impacted by information risks.
Must provide assurance to the Provost with regard to effective management of information risk.
Must work within a governance structure with clear lines of information asset ownership and defined roles and responsibilities.
Must be accountable for the maintenance of ISMS information security policies.
Must review and agree upon actions to mitigate intolerable information risks escalated through the ISMS.
Must undertake suitable information security training regularly.