GRM-08: Policy Impact on Risk Assessments

Control Statement

Risk assessment results shall include updates to security policies, procedures, standards, and controls to ensure that they remain relevant and effective.