💼 Governance (ID.GV)
- ID:
/frameworks/nist-csf-v1.1/id-gv
Description​
The policies, procedures, and processes to manage and monitor the organization's regulatory, legal, risk, environmental, and operational requirements are understood and inform the management of cybersecurity risk.
Similar​
- Internal
- ID:
dec-b-6f3503a4
- ID:
Sub Sections​
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|---|---|---|---|---|
| 💼 ID.GV-1: Organizational cybersecurity policy is established and communicated | no data | ||||
| 💼 ID.GV-2: Cybersecurity roles and responsibilities are coordinated and aligned with internal roles and external partners | no data | ||||
| 💼 ID.GV-3: Legal and regulatory requirements regarding cybersecurity, including privacy and civil liberties obligations, are understood and managed | 1 | 4 | no data | ||
| 💼 ID.GV-4: Governance and risk management processes address cybersecurity risks | no data |