4.4.3.1
Cyber Security Risk Assessment
Senior Leadership Risk Assessments and Control Implementation
Cyber Security Risk Assessment – Senior Leadership Risk Assessments and Control Implementation – The member of the senior-level leadership team appointed to oversee the organization’s IT security shall conduct cyber security risk assessments and coordinate the implementation of cyber security controls to address potential cyber security risks.
-
8.8 Management of Technical Vulnerabilities:Â Obtain information on technical vulnerabilities of in-use information systems, evaluate the organization’s exposure, and take appropriate measures.
-
3.11.1 Periodically assess the risk to organizational operations (including mission, functions, image, or reputation), organizational assets, and individuals, resulting from the operation of organizational systems and the associated processing, storage, or transmission of CUI.
3.11.3 Remediate vulnerabilities in accordance with risk assessments.
3.12.2 Develop and implement plans of action designed to correct deficiencies and reduce or eliminate vulnerabilities in organizational systems.
-
3.11.1 Periodically assess the risk to organizational operations (including mission, functions, image, or reputation), organizational assets, and individuals, resulting from the operation of organizational systems and the associated processing, storage, or transmission of CUI.
3.11.3 Remediate vulnerabilities in accordance with risk assessments.
3.12.2 Develop and implement plans of action designed to correct deficiencies and reduce or eliminate vulnerabilities in organizational systems.