ID.GV-4

Standard

Standard Version

NIST CSF

(v1.1)

Governance (ID.GV): The policies, procedures, and processes to manage and monitor the organization’s regulatory, legal, risk, environmental, and operational requirements are understood and inform the management of cybersecurity risk.

Governance and risk management processes address cybersecurity risks