GV.RM.S4—GV.RM.S4
>Control Description
Risk tolerance and risk appetite statements shall be established, communicated, and maintained. REs shall determine and clearly express their risk tolerance and risk acceptance. The risk tolerance of the REs shall be informed by their role in critical infrastructure and/ or sector specific risk analysis. REs shall maintain a risk register which shall be periodically reviewed by their IT Committee for REs.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.