GV.PO-01 Policy for managing cybersecurity risks is established based on organizational context, cybersecurity strategy, and priorities and is communicated …

Statement

Policy for managing cybersecurity risks is established based on organizational context, cybersecurity strategy, and priorities and is communicated and enforced

Guidance

Create, disseminate, and maintain an understandable, usable risk management policy with statements of management intent, expectations, and direction

Guidance

Periodically review policy and supporting processes and procedures to ensure that they align with risk management strategy objectives and priorities, as well as the high-level direction of the cybersecurity policy

Guidance

Require approval from senior management on policy

Guidance

Communicate cybersecurity risk management policy and supporting processes and procedures across the organization

Guidance

Require personnel to acknowledge receipt of policy when first hired, annually, and whenever policy is updated

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

3. Regolamentazioni correlate

Ticket collegati

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final