GV.RM-03 Cybersecurity risk management activities and outcomes are included in enterprise risk management processes

Statement

Cybersecurity risk management activities and outcomes are included in enterprise risk management processes

Guidance

Aggregate and manage cybersecurity risks alongside other enterprise risks (e.g., compliance, financial, operational, regulatory, reputational, safety)

Guidance

Include cybersecurity risk managers in enterprise risk management planning

Guidance

Establish criteria for escalating cybersecurity risks within enterprise risk management

1. Επισκόπηση

1.1 Παραπομπές

• 1.1 Policy on the security of network and information systems
• 2.1 Risk management framework

1.2 Εντοπισμένες απαιτήσεις

1.3 Σχετικοί κανονισμοί

2. Εντοπισμένες απαιτήσεις

3. Σχετικοί κανονισμοί

Συνδεδεμένα ζητήματα

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final