Register
BASC IT and Information Security Responsibilities
This register defines the IT and information security roles and responsibilities for compliance with the BASC International Norm and the applicable BASC International Security Standard (6.0.2 or 6.0.3). BASC certification requires documented accountability for security controls. This register maps BASC control domains to responsible parties within IT, identifies the corresponding GRC library documents, and notes where IT ownership ends and operational ownership begins.
- Type
- Register
- Version
- 1.1.3
- Date
- 2026-09-01
- Owner
- Chief Information Security Officer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Compliance: Logistics Sector
- Review frequency
- Annual and upon material regulatory or framework change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- Scope
- BASC IT and information security responsibility matrix
- Ownership boundary
- Related standards and procedures
- References
- Document history
Related documents
- compliance/
logistics/ sourceREADME.md (opens in a new tab) - BASC Programme Overview Annexcompliance
- BASC Information Security Policycompliance
- BASC IT Compliance Monitoring and KPIscompliance
- Compliance, Audit, and CAPA Management Policycompliance
- Global Regulatory Applicability Registercompliance
- Governance Library Chartergovernance
- Enterprise Governance and Risk Management Policyrisk
- Enterprise Risk Management Standardrisk
- Information Security Policysecurity
- Identity and Access Management Policysecurity
- Logging and Monitoring Standardsecurity
- Security Incident Response Proceduresecurity
- Privileged Access Management Standardsecurity
- Authentication and Password Management Standardsecurity
- Change Management and Configuration Control Procedureoperations
- Supplier and Cloud Governance Frameworksupply-chain
Next
All Documents