MIL1 requirements
a. The organization has a strategy for cyber risk management, which may be developed and managed in an ad hoc manner
MIL2 requirements
b. A strategy for cyber risk management is established and maintained in alignment with the organization’s cybersecurity program strategy (PROGRAM-1b) and enterprise architecture
c. The cyber risk management program is established and maintained to perform cyber risk management activities according to the cyber risk management strategy
d. Information from RISK domain activities is communicated to relevant stakeholders
e. Governance for the cyber risk management program is established and maintained
f. Senior management sponsorship for the cyber risk management program is visible and active
MIL3 requirements
g. The cyber risk management program aligns with the organization's mission and objectives
h. The cyber risk management program is coordinated with the organization’s enterprisewide risk management program
The organization has defined procedures for assessing and treating cyber security risks. The definition includes at least:
The task owner regularly checks that the procedure is clear and produces consistent results.
Organisaation täytyy määrittää hyväksyttävä taso riskeille. Taso lasketaan riskien todennäköisyyden, vakavuuden ja hallintakeinojen pohjalta.
Paranna osaamistasi viikoittaisten webinaarien, videokurssien, artikkeleiden ja blogien avulla.
