GV.RM-01 Risk management objectives are established and agreed to by organizational stakeholders

Statement

Risk management objectives are established and agreed to by organizational stakeholders

Guidance

Update near-term and long-term cybersecurity risk management objectives as part of annual strategic planning and when major changes occur

Guidance

Establish measurable objectives for cybersecurity risk management (e.g., manage the quality of user training, ensure adequate risk protection for industrial control systems)

Guidance

Senior leaders agree about cybersecurity objectives and use them for measuring and managing risk and performance

1. Översikt

1.1 Referenser

1.2 Identifierade krav

1.3 Relaterade regleringar

2. Identifierade krav

3. Relaterade regleringar

Länkade ärenden

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final