Requirement
Cybersecurity reviews must be conducted periodically by the cybersecurity function in the organization to assess the compliance with the cybersecurity controls in the organization.
Control Implementation Guidelines
- Review the implementation of cybersecurity requirements at the organization by the cybersecurity function periodically according to a documented and approved plan for review and based on a period specified in the policy (e.g., quarterly review), to ensure that the cybersecurity controls of the organization are effectively implemented and operate in accordance with the regulatory policies and procedures of the organization, the national laws and regulations, and the international requirements approved by the organization
Relevant Cybersecurity Tools
- Cybersecurity Review and Audit Template.
- Cybersecurity Review and Audit Log Template.
Expected Deliverables
- A document (such as approved policy or procedure) indicating the identification and documentation of the requirements related to this control
- Approved plan to review the implementation of cybersecurity controls
- Documents that confirm the implementation of Cybersecurity Standard controls to information, technology, and physical assets
- Periodic review reports of cybersecurity controls implementation in the organization
