Conformio - setting up people and departments

For small companies (up to 50 employees) it is not critical that the project sponsor do not get directly involved with the project. This “no involvement” is normally defined because the project sponsor is often part of top management, and if he gets to involved with the project (i.e., acts as a project manager), this situation may end impacting his other functions.

In case the managing director (MD) has the necessary authority to solve problems that can make the project stuck, and make decisions to ensure project success, there is no problem for this role to be assigned as the project sponsor, instead of the chairman.

For further information, see:

• Who should be your project manager for ISO 27001/ISO 22301? https://advisera.com/27001academy/blog/2014/12/01/who-should-be-your-project-manager-for-iso-27001-iso-22301/
• RACI matrix for ISO 27001 implementation project https://advisera.com/27001academy/blog/2018/11/05/raci-matrix-for-iso-27001-implementation-project/