ISMS Policy

Answer:

Responsibilities for communication of information related to information security, the adoption and implementation of the Training and Awareness Plan can be designated to the Chief Information Security Officer (CISO), if the organization decides to implement such a role, or to an existent role with access to TopManagement.

These articles will provide you further explanation about CISO role:
- What is the job of Chief Information Security Officer (CISO) in ISO 27001? https://advisera.com/27001academy/knowledgebase/what-is-the-job-of-chief-information-security-officer-ciso-in-iso-27001/
- Chief Information Security Officer (CISO) – where does he belong in an org chart? https://advisera.com/27001academy/blog/2012/09/11/chief-information-security-officer-ciso-where-does-he-belong-in-an-org-chart/