Lesson content in mp3 formatAlthough the standard does not specifically require the appointment of a Representative and/or Security Forum, it does mandate the assignment of responsibilities for ensuring compliance with and reporting on the ISMS. In practice, this may involve appointing a Representative and/or establishing a Security Forum.