+GV.RR-02 Roles, responsibilities, and authorities related to cybersecurity risk management are established, communicated, understood, and enforced

GV.RR-02 Roles, responsibilities, and authorities related to cybersecurity risk management are established, communicated, understood, and enforced

Statement

Roles, responsibilities, and authorities related to cybersecurity risk management are established, communicated, understood, and enforced

Guidance

Document risk management roles and responsibilities in policy

Guidance

Document who is responsible and accountable for cybersecurity risk management activities and how those teams and individuals are to be consulted and informed

Guidance

Include cybersecurity responsibilities and performance requirements in personnel descriptions

Guidance

Document performance goals for personnel with cybersecurity risk management responsibilities, and periodically measure performance to identify areas for improvement

Guidance

Clearly articulate cybersecurity responsibilities within operations, risk functions, and internal audit functions

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
is blocked by Assigned Security, Compliance & Resilience Responsibilities
is blocked by Position Categorization
is blocked by Defined Roles & Responsibilities
is blocked by Responsible, Accountable, Supportive, Consulted & Informed (RASCI) Matrix