2.4.3.1

Req No	Requirement	Compliance Class And Applicability	Primary Keyword	Secondary Keyword
2.4.3.1	There is a person or role, accountable to the Board, who takes ownership of and is responsible for product, service and business level security, and mandates and monitors the security policy.	Mandatory for all classes	Business	Responsibility