GV.OV-03 Organizational cybersecurity risk management performance is evaluated and reviewed for adjustments needed

Statement

Organizational cybersecurity risk management performance is evaluated and reviewed for adjustments needed

Guidance

Review key performance indicators (KPIs) to ensure that organization-wide policies and procedures achieve objectives

Guidance

Review key risk indicators (KRIs) to identify risks the organization faces, including likelihood and potential impact

Guidance

Collect and communicate metrics on cybersecurity risk management with senior leadership

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

3. Související regulace

Propojené úkoly

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final