GV.RM-03 Cybersecurity risk management activities and outcomes are included in enterprise risk management processes

Statement

Cybersecurity risk management activities and outcomes are included in enterprise risk management processes

Guidance

Aggregate and manage cybersecurity risks alongside other enterprise risks (e.g., compliance, financial, operational, regulatory, reputational, safety)

Guidance

Include cybersecurity risk managers in enterprise risk management planning

Guidance

Establish criteria for escalating cybersecurity risks within enterprise risk management

1. Pārskats

1.1 Atsauces

• 1.1 Policy on the security of network and information systems
• 2.1 Risk management framework

1.2 Identificētās prasības

1.3 Saistītie tiesību akti

2. Identificētās prasības

3. Saistītie tiesību akti

Saistītie uzdevumi

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final