content_image/480816.jpg
<img src='content_image/480816.jpg'>

• support and provide security advice for projects and services in order to implement appropriate security measures and controls to mitigate the identified risks, 

• regularly report on the status of IT security to the Director of Information Systems and Executive Office, 

• escalate IT security issues as necessary, 

• design and document Common IT Security Controls, coordinate their implementation and design / document regular checks to ensure that the controls are in place and work efficiently, 

• manage IT security incident response as defined in the IT Security Service description, 

• coordinate regular security assessments and security tests as defined in the IT Security Service description, and 

• provide support for audits when the Information Systems Directorate is audited, especially if the audit focuses on IT security. 

The role of the IT Security Officer is cross-functional and requires close co-operation within and beyond the Directorate. The IT Security Officer coordinates implementation of security improvements together with the Information Systems Directorate ’s  Director, Heads of Units, Programme Managers and Team Leaders and other relevant parties and provides security consultation for projects and services by working closely with the architectures, Project Managers, system administrators, Service Managers and other key partners. The IT Security Officer works in close co-operation with the Security Manager from the Executive Office. 

The IT Security Officer has an expert and advisory role in the risk management process. He performs risk assessments and proposes risk mitigation options for the decision makers. Nnote that the IT Security Officer does not make risk management decisions himself. 

## 3.10.7. Roles and Responsibilities - Contract Management 

Contract management may be performed by any of the roles described in this document. The contract management activities and in general, acting as the Contract Manager, can be assigned as part of the job description or agreed separate as necessary. 

The Contract Manager 

## Contract Manager (CoM) 

• manages all aspects of the contract in accordance with the terms and conditions of the contract, including 

o performance (including verification of compliance of the supplies and services with the requirements of the contract), 

o financial issues, 

o payments and payment conditions, 

o problems, 

o risks, 

