+PM-29 Risk Management Program Leadership Roles

PM-29 Risk Management Program Leadership Roles

Control

  1. Appoint a Senior Accountable Official for Risk Management to align organizational information security and privacy management processes with strategic, operational, and budgetary planning processes; and
  2. Establish a Risk Executive (function) to view and analyze risk from an organization-wide perspective and ensure management of risk is consistent across the organization.

Discussion

The senior accountable official for risk management leads the risk executive (function) in organization-wide risk management activities.

Assessment Objective

    1. a Senior Accountable Official for Risk Management is appointed;
    2. a Senior Accountable Official for Risk Management aligns information security and privacy management processes with strategic, operational, and budgetary planning processes;
    1. a Risk Executive (function) is established;
    2. a Risk Executive (function) views and analyzes risk from an organization-wide perspective;
    3. a Risk Executive (function) ensures that the management of risk is consistent across the organization.

Assessment Method

Examine

Information security program plan privacy program plan risk management strategy supply chain risk management strategy documentation of appointment, roles, and responsibilities of a Senior Accountable Official for Risk Management documentation of actions taken by the Official documentation of the establishment, policies, and procedures of a Risk Executive (function)

Interview

Senior Accountable Official for Risk Management chief information officer senior agency information security officer senior agency official for privacy organizational personnel with information security and privacy program responsibilities

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
is blocked by PM-29 Risk Management Program Leadership Roles – Assessment Procedure
is blocked by Assigned Security, Compliance & Resilience Responsibilities
is blocked by Risk Management Program
is blocked by Supply Chain Risk Management (SCRM) Plan