GV.RM-01_gvrm-01
Risk management objectives are established and agreed to by organizational stakeholders
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Risk management objectives are established and agreed to by organizational stakeholders
Risk appetite and risk tolerance statements are established, communicated, and maintained
Strategic direction that describes appropriate risk response options is established and communicated
Suppliers are known and prioritized by criticality
The organization’s role in the supply chain is identified and communicated
The organization’s place in critical infrastructure and its industry sector is identified and communicated
Critical suppliers are assessed prior to acquisition
The organization’s determination of risk tolerance is informed by its role in critical infrastructure and sector specific risk analysis
Manage public relations associated with an incident;
Develop, document, and disseminate to [organization-defined]: [organization-defined] physical and environmental protection policy that: Procedures to