GV.OV-02 The cybersecurity risk management strategy is reviewed and adjusted to ensure coverage of organizational requirements and risks

Statement

The cybersecurity risk management strategy is reviewed and adjusted to ensure coverage of organizational requirements and risks

Guidance

Review audit findings to confirm whether the existing cybersecurity strategy has ensured compliance with internal and external requirements

Guidance

Review the performance oversight of those in cybersecurity-related roles to determine whether policy changes are necessary

Guidance

Review strategy in light of cybersecurity incidents

1. Overview

1.1 References

• 2.2 Compliance monitoring
• 2.3 Independent review of information and network security
• 2.2 and the monitoring and measurement pursuant to point 7, shall be reported to the management bodies. …

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final