GV.RM-03 Cybersecurity risk management activities and outcomes are included in enterprise risk management processes

Statement

Cybersecurity risk management activities and outcomes are included in enterprise risk management processes

Guidance

Aggregate and manage cybersecurity risks alongside other enterprise risks (e.g., compliance, financial, operational, regulatory, reputational, safety)

Guidance

Include cybersecurity risk managers in enterprise risk management planning

Guidance

Establish criteria for escalating cybersecurity risks within enterprise risk management

1. Apžvalga

1.1 Nuorodos

1.2 Nustatyti reikalavimai

1.3 Susiję teisės aktai

2. Nustatyti reikalavimai

3. Susiję teisės aktai

Susietos užduotys

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final