GV.RM-04 Strategic direction that describes appropriate risk response options is established and communicated

Statement

Strategic direction that describes appropriate risk response options is established and communicated

Example

Specify criteria for accepting and avoiding cybersecurity risk for various classifications of data

Example

Determine whether to purchase cybersecurity insurance

Example

Document conditions under which shared responsibility models are acceptable (e.g., outsourcing certain cybersecurity functions, having a third party perform financial transactions on behalf of the organization, using public cloud-based services)

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

3. Relaterede reguleringer

Linkede sager

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final