GV.RM-03 Cybersecurity risk management activities and outcomes are included in enterprise risk management processes

Statement

Cybersecurity risk management activities and outcomes are included in enterprise risk management processes

Example

Aggregate and manage cybersecurity risks alongside other enterprise risks (e.g., compliance, financial, operational, regulatory, reputational, safety)

Example

Include cybersecurity risk managers in enterprise risk management planning

Example

Establish criteria for escalating cybersecurity risks within enterprise risk management

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

3. Relaterede reguleringer

Linkede sager

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final