GV.OV-03 Organizational cybersecurity risk management performance is evaluated and reviewed for adjustments needed

Statement

Organizational cybersecurity risk management performance is evaluated and reviewed for adjustments needed

Guidance

Review key performance indicators (KPIs) to ensure that organization-wide policies and procedures achieve objectives

Guidance

Review key risk indicators (KRIs) to identify risks the organization faces, including likelihood and potential impact

Guidance

Collect and communicate metrics on cybersecurity risk management with senior leadership

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final