GV.RM-02 Risk appetite and risk tolerance statements are established, communicated, and maintained

Statement

Risk appetite and risk tolerance statements are established, communicated, and maintained

Guidance

Determine and communicate risk appetite statements that convey expectations about the appropriate level of risk for the organization

Guidance

Translate risk appetite statements into specific, measurable, and broadly understandable risk tolerance statements

Guidance

Refine organizational objectives and risk appetite periodically based on known risk exposure and residual risk

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

3. Relaterede reguleringer

Linkede sager

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final