|
+GV.RM-01 Risk management objectives are established and agreed to by organizational stakeholders |
GV.RM-01 Risk management objectives are established and agreed to by organizational stakeholdersStatementRisk management objectives are established and agreed to by organizational stakeholders GuidanceUpdate near-term and long-term cybersecurity risk management objectives as part of annual strategic planning and when major changes occur GuidanceEstablish measurable objectives for cybersecurity risk management (e.g., manage the quality of user training, ensure adequate risk protection for industrial control systems) GuidanceSenior leaders agree about cybersecurity objectives and use them for measuring and managing risk and performance 1. Overview
1.1 References1.2 Identified Requirements1.3 Related Regulations2. Identified Requirements
3. Related Regulations
Linked Issues |