GV.OV-03 Organizational cybersecurity risk management performance is evaluated and reviewed for adjustments needed

Statement

Organizational cybersecurity risk management performance is evaluated and reviewed for adjustments needed

Example

Review key performance indicators (KPIs) to ensure that organization-wide policies and procedures achieve objectives

Example

Review key risk indicators (KRIs) to identify risks the organization faces, including likelihood and potential impact

Example

Collect and communicate metrics on cybersecurity risk management with senior leadership

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

3. Relaterede reguleringer

Linkede sager

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final