4.4.3.8

Cyber Security Risk Assessment

Baseline Controls Per Section 5 and 6

Cyber Security Risk Assessment – Baseline Controls Per Section 5 and 6 – Regardless of the outcomes from the cyber security risk assessment, the organization shall implement the foundational or baseline cyber security controls specified in Section 5, and as appropriate, Section 6 based on its business environment.