ID.GV-3

Standard

Standard Version

NIST CSF

(v1.1)

Governance (ID.GV): The policies, procedures, and processes to manage and monitor the organization’s regulatory, legal, risk, environmental, and operational requirements are understood and inform the management of cybersecurity risk.

Legal and regulatory requirements regarding cybersecurity, including privacy and civil liberties obligations, are understood and managed