ID.GV Governance

Statement

Summary	Standard
ID.GV-01 Organizational cybersecurity policy is established and communicated	Statement Organizational cybersecurity policy is established and communicated
ID.GV-02 Cybersecurity roles and responsibilities are coordinated and aligned with internal roles and external partners	Statement Cybersecurity roles and responsibilities are coordinated and aligned with internal roles and external partners
ID.GV-03 Legal and regulatory requirements regarding cybersecurity, including privacy and civil liberties obligations, are understood and managed	Statement Legal and regulatory requirements regarding cybersecurity, including privacy and civil liberties obligations, are understood and managed
ID.GV-04 Governance and risk management processes address cybersecurity risks	Statement Governance and risk management processes address cybersecurity risks

Requirements
Source	Requirement

Regulations
Source	Regulation