GV.RR-02 Roles, responsibilities, and authorities related to cybersecurity risk management are established, communicated, understood, and enforced

Statement

Roles, responsibilities, and authorities related to cybersecurity risk management are established, communicated, understood, and enforced

Guidance

Document risk management roles and responsibilities in policy

Guidance

Document who is responsible and accountable for cybersecurity risk management activities and how those teams and individuals are to be consulted and informed

Guidance

Include cybersecurity responsibilities and performance requirements in personnel descriptions

Guidance

Document performance goals for personnel with cybersecurity risk management responsibilities, and periodically measure performance to identify areas for improvement

Guidance

Clearly articulate cybersecurity responsibilities within operations, risk functions, and internal audit functions

1. Översikt

1.1 Referenser

• 1.2 Roles, responsibilities and authorities

1.2 Identifierade krav

1.3 Relaterade regleringar

2. Identifierade krav

3. Relaterade regleringar

Länkade ärenden

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final