GV.OV-03 Organizational cybersecurity risk management performance is evaluated and reviewed for adjustments needed

Statement

Organizational cybersecurity risk management performance is evaluated and reviewed for adjustments needed

Example

Review key performance indicators (KPIs) to ensure that organization-wide policies and procedures achieve objectives

Example

Review key risk indicators (KRIs) to identify risks the organization faces, including likelihood and potential impact

Example

Collect and communicate metrics on cybersecurity risk management with senior leadership

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

3. Regolamentazioni correlate

Ticket collegati

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final