Skip to content

Security Committee

What is Security Committee?

A governance body composed of representatives from various departments responsible for overseeing the organization's security strategy and policies.

Governance

What the standards actually require on security committee

Requirements naming security committee across 5 standards, quoted from the control text.

An Information Security Committee, overseen by the ITSC and composed as the ITSC decides with the CISO and business, IT and other representatives, is headed by someone from the risk management vertical;

rbi-cybersecurity-framework-for-banks::23 · Para 23: Information Security Committee under ITSC oversight, headed from risk management →

The State ensures an airport security committee is set up at each airport serving civil aviation to help that authority coordinate the controls and procedures set out in the airport security programme.

icao-annex-17-aviation-security-avsec::3.2.3 · 3.2.3 Airport security committee →

Input: the list of identified risks. Action: assign each risk to a risk owner. Trigger: it has not been done, or personnel change in the business area where the risks sit. Output: risk owners with their risks.

iso-27005-2022::7.2.2 · Identifying risk owners →

Supplementary control: at least one named person should hold responsibility for information security. Aim: clear direction, visible management support and adequate technical expertise for health information security.

iso-27799-2025::5.2 · 5.2 Information security roles and responsibilities →
Spain ENS1 control

The security policy, approved under Article 12, sets out clearly the organisation's mission, its legal and regulatory framework, security roles with duties and how they are appointed and renewed, the security committee structure and membership, and guidelines...

spain-ens::org.1 · Security policy document →

Questions people ask about security committee

What is Security Committee?
A governance body composed of representatives from various departments responsible for overseeing the organization's security strategy and policies.
Why is Security Committee important for compliance?
Security Committee is a key concept in Governance. Understanding security committee helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Security Committee?
Security Committee appears in the requirement text of RBI Cybersecurity Framework for Banks, ICAO Annex 17 - Aviation Security (AVSEC), ISO 27005:2022, ISO 27799:2025, Spain ENS. Across these standards we have identified 8 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Security Committee?
Explore our compliance framework pages to see how security committee applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Security Committee applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.