Information Security Roles and Responsibilities. Administrator will employ personnel adequate to manage Administrator's information security risks and perform the core cybersecurity functions of identify, protect, detect, respond and recover. Administrator will designate a qualified employee to serve as its Chief Information Security Officer (“CISO”) responsible for overseeing and implementing its information security program and enforcing its information security policies. Administrator will define roles and responsibilities with respect to information security, including by identifying responsibilities for the protection of individual assets, for carrying out specific information security processes, and for information security risk management activities, including acceptance of residual risks. These responsibilities should be supplemented, where appropriate, with more detailed guidance for specific sites and information processing facilities.
Information Security Roles and Responsibilities. Voya will employ personnel adequate to manage Voya’s information security risks and perform the core cyber security functions of identify, protect, detect, respond and recover. Voya will designate a qualified employee to serve as its Chief Information Security Officer (“CISO”) responsible for overseeing and implementing its information security program and enforcing its information security policies. Voya will define roles and responsibilities with respect to information security, including by identifying responsibilities for the protection of individual assets, for carrying out specific information security processes, and for information security risk management activities, including acceptance of residual risks. These responsibilities should be supplemented, where appropriate, with more detailed guidance for specific sites and information processing facilities.
Information Security Roles and Responsibilities. Supplier will employ personnel adequate to manage Supplier’s information security risks and perform the core cyber security functions of identify, protect, detect, respond and recover. Supplier will designate a qualified member of the Service Delivery Organization to serve as its Chief Information Security Officer (“CISO”) responsible for overseeing and implementing its information security program and enforcing its information security policies. Supplier will define roles and responsibilities with respect to information security, including by identifying responsibilities for the protection of individual assets, for carrying out specific information security processes, and for information security risk management activities, including acceptance of residual risks. These responsibilities will be supplemented, where appropriate, with more detailed guidance for specific sites and information processing facilities.
