GV.OV-02 The cybersecurity risk management strategy is reviewed and adjusted to ensure coverage of organizational requirements and risks

Statement

The cybersecurity risk management strategy is reviewed and adjusted to ensure coverage of organizational requirements and risks

Example

Review audit findings to confirm whether the existing cybersecurity strategy has ensured compliance with internal and external requirements

Example

Review the performance oversight of those in cybersecurity-related roles to determine whether policy changes are necessary

Example

Review strategy in light of cybersecurity incidents

1. Ħarsa ġenerali

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

3. Regolamenti relatati

Kwistjonijiet marbuta

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final