GV.OV-02 The cybersecurity risk management strategy is reviewed and adjusted to ensure coverage of organizational requirements and risks

Statement

The cybersecurity risk management strategy is reviewed and adjusted to ensure coverage of organizational requirements and risks

Guidance

Review audit findings to confirm whether the existing cybersecurity strategy has ensured compliance with internal and external requirements

Guidance

Review the performance oversight of those in cybersecurity-related roles to determine whether policy changes are necessary

Guidance

Review strategy in light of cybersecurity incidents

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

3. Relaterede reguleringer

Linkede sager

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final