GV.RM-03 Cybersecurity risk management activities and outcomes are included in enterprise risk management processes

Statement

Cybersecurity risk management activities and outcomes are included in enterprise risk management processes

Guidance

Aggregate and manage cybersecurity risks alongside other enterprise risks (e.g., compliance, financial, operational, regulatory, reputational, safety)

Guidance

Include cybersecurity risk managers in enterprise risk management planning

Guidance

Establish criteria for escalating cybersecurity risks within enterprise risk management

1. Prezentare generală

1.1 Referințe

1.2 Cerințe identificate

1.3 Reglementări asociate

2. Cerințe identificate

3. Reglementări asociate

Tichete legate

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final