Person or group of people who directs and controls an organization at the highest level.
- Note 1 to entry: Top management has the power to delegate authority and provide resources within the organization.
- Note 2 to entry: If the scope of the management system covers only part of an organization then top management refers to those who direct and control that part of the organization.
Source: ISO/IEC 27000:2014, Information technology — Security techniques — Information security management systems — Overview and vocabulary, Third Edition, January 2014. Global Standards