+GV.RM-04 Strategic direction that describes appropriate risk response options is established and communicated

GV.RM-04 Strategic direction that describes appropriate risk response options is established and communicated

Statement

Strategic direction that describes appropriate risk response options is established and communicated

Guidance

Specify criteria for accepting and avoiding cybersecurity risk for various classifications of data

Guidance

Determine whether to purchase cybersecurity insurance

Guidance

Document conditions under which shared responsibility models are acceptable (e.g., outsourcing certain cybersecurity functions, having a third party perform financial transactions on behalf of the organization, using public cloud-based services)

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
is blocked by Risk Management Program
is blocked by Risk Framing
is blocked by Risk Response
is blocked by Risk Remediation
is blocked by Compensating Countermeasures