Policy for managing cybersecurity risks is established based on organizational context, cybersecurity strategy, and priorities and is communicated and enforced
Organizational cybersecurity policy is established, communicated, and enforced
| Citation | GV.PO |
|---|---|
| Clé de plateforme | arcate:compliance:requirements/nist-csf/2.0/GV.PO |
| Emplacement dans la source | row 23 of sheet 'CSF 2.0' |
| Publié par | NIST |
Exigences filles
Policy for managing cybersecurity risks is reviewed, updated, communicated, and enforced to reflect changes in requirements, threats, technology, and organizational mission