Definitions
Business Owner
A designated organizational official who "owns" the purpose of the information system and is ultimately accountable for the business function performed by that system and for accepting the risks associated with its operation.
System Owner
A designated organizational official responsible for the development, integration, technical operation, and maintenance of an information system and meets the security requirements defined by the Business Owner and organizational policies.
Directive (SI-1 System and Information Integrity)
GNB shall establish, implement, and maintain a formal System and Information Integrity Directive to ensure that organizational information systems are protected from unauthorized changes, malicious activity, and integrity‑compromising conditions.
Purpose
This directive establishes the foundational governance necessary to ensure that organizational systems remain trustworthy, resilient, and free from unauthorized or malicious alteration.
The purpose of the System and Information Integrity Directive is to:
- provide a standardized approach for identifying and correcting flaws in GNB information systems in a timely manner
- provide protection from malware
