GV.RM-04 Strategic direction that describes appropriate risk response options is established and communicated

Statement

Strategic direction that describes appropriate risk response options is established and communicated

Guidance

Specify criteria for accepting and avoiding cybersecurity risk for various classifications of data

Guidance

Determine whether to purchase cybersecurity insurance

Guidance

Document conditions under which shared responsibility models are acceptable (e.g., outsourcing certain cybersecurity functions, having a third party perform financial transactions on behalf of the organization, using public cloud-based services)

1. Επισκόπηση

1.1 Παραπομπές

1.2 Εντοπισμένες απαιτήσεις

1.3 Σχετικοί κανονισμοί

2. Εντοπισμένες απαιτήσεις

3. Σχετικοί κανονισμοί

Συνδεδεμένα ζητήματα

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final