Requirement
The cybersecurity risk management methodology and procedures must be implemented by the cybersecurity function.
Control Implementation Guidelines
- Implement all requirements of the cybersecurity risk management methodology and procedures adopted by the organization
- Establish a cybersecurity risk register to document and monitor risks
- Develop plans to address cybersecurity risks of the organization
Relevant Cybersecurity Tools
- Cybersecurity Risk Management Register Template
Expected Deliverables
- Cybersecurity Risk Register of the organization
- Cybersecurity Risk Treatment Plan of the organization
- A report that outlines the cybersecurity risk assessment and monitoring
