GV.RM-01 Risk management objectives are established and agreed to by organizational stakeholders

Statement

Risk management objectives are established and agreed to by organizational stakeholders

Example

Update near-term and long-term cybersecurity risk management objectives as part of annual strategic planning and when major changes occur

Example

Establish measurable objectives for cybersecurity risk management (e.g., manage the quality of user training, ensure adequate risk protection for industrial control systems)

Example

Senior leaders agree about cybersecurity objectives and use them for measuring and managing risk and performance

1. Ħarsa ġenerali

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

3. Regolamenti relatati

Kwistjonijiet marbuta

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final