4.4.3.5

Cyber Security Risk Assessment

Identification of Internal Staffing for IT and IT Security

The organization shall identify their internal staffing levels for cyber security (as raw numbers and as a percent of total staff).