GV.RM-04 Strategic direction that describes appropriate risk response options is established and communicated

Statement

Strategic direction that describes appropriate risk response options is established and communicated

Guidance

Specify criteria for accepting and avoiding cybersecurity risk for various classifications of data

Guidance

Determine whether to purchase cybersecurity insurance

Guidance

Document conditions under which shared responsibility models are acceptable (e.g., outsourcing certain cybersecurity functions, having a third party perform financial transactions on behalf of the organization, using public cloud-based services)

1. Yleiskatsaus

1.1 Viittaukset

1.2 Tunnistetut vaatimukset

1.3 Liittyvät säädökset

2. Tunnistetut vaatimukset

3. Liittyvät säädökset

Linkitetyt tehtävät

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final