Requirement
The cybersecurity requirements in project management must be reviewed periodically.
Control Implementation Guidelines
- Review the cybersecurity project management requirements periodically according to a documented and approved plan for review and based on a planned interval (e.g., periodic review must be conducted annually)
- Document the review and changes to the cybersecurity requirements for project management in the organization and approve them by the head of the organization or his/her deputy
Expected Deliverables
- An approved document that defines the review schedule for the cybersecurity requirements for project management
- Evidence that the periodic review of cybersecurity requirements in project management and changes to the information and technology assets of the organization is performed
