GV.RR-03 Adequate resources are allocated commensurate with the cybersecurity risk strategy, roles, responsibilities, and policies

Statement

Adequate resources are allocated commensurate with the cybersecurity risk strategy, roles, responsibilities, and policies

Guidance

Conduct periodic management reviews to ensure that those given cybersecurity risk management responsibilities have the necessary authority

Guidance

Identify resource allocation and investment in line with risk tolerance and response

Guidance

Provide adequate and sufficient people, process, and technical resources to support the cybersecurity strategy

1. Overview

1.1 References

• 2.1 Risk management framework

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final