GV.OV: Oversight

Category is new to this version of the framework.

Description

Results of organization-wide cybersecurity risk management activities and performance are used to inform, improve, and adjust the risk management strategy

Framework Subcategories

GV.OV-01: Cybersecurity risk management strategy outcomes are reviewed to inform and adjust strategy and direction

[csf.tools Note: Subcategories do not have detailed descriptions.]

GV.OV-02: The cybersecurity risk management strategy is reviewed and adjusted to ensure coverage of organizational requirements and risks

[csf.tools Note: Subcategories do not have detailed descriptions.]

GV.OV-03: Organizational cybersecurity risk management performance is evaluated and reviewed for adjustments needed

[csf.tools Note: Subcategories do not have detailed descriptions.]