+GV.RM-07 Strategic opportunities (i.e., positive risks) are characterized and are included in organizational cybersecurity risk discussions

GV.RM-07 Strategic opportunities (i.e., positive risks) are characterized and are included in organizational cybersecurity risk discussions

Statement

Strategic opportunities (i.e., positive risks) are characterized and are included in organizational cybersecurity risk discussions

Guidance

Define and communicate guidance and methods for identifying opportunities and including them in risk discussions (e.g., strengths, weaknesses, opportunities, and threats (SWOT) analysis)

Guidance

Identify stretch goals and document them

Guidance

Calculate, document, and prioritize positive risks alongside negative risks

1. Vue d’ensemble

Intitulé Norme

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences
Source Exigence

3. Réglementations associées

Réglementations
Source Réglementation

Tickets liés

Liens
Type de lien Ticket
is blocked by Risk Framing