💼 GV.RM-05: Lines of communication across the organization are established for cybersecurity risks, including risks from suppliers and other third parties

• Contextual name: 💼 GV.RM-05: Lines of communication across the organization are established for cybersecurity risks, including risks from suppliers and other third parties
• ID: /frameworks/nist-csf-v2.0/gv-rm/05
• Located in: 💼 Risk Management Strategy (GV.RM)

Description

1. Determine how to update senior executives, directors, and management on the organization's cybersecurity posture at agreed-upon intervals
2. Identify how all departments across the organization - such as management, operations, internal auditors, legal, acquisition, physical security, and HR - will communicate with each other about cybersecurity risks

Similar

• Sections
  • /frameworks/nist-csf-v1.1/id-sc/01
  • /frameworks/nist-sp-800-53-r5/pm/09
  • /frameworks/nist-sp-800-53-r5/pm/30

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 NIST CSF v1.1 → 💼 ID.SC-1: Cyber supply chain risk management processes are identified, established, assessed, managed, and agreed to by organizational stakeholders
💼 NIST SP 800-53 Revision 5 → 💼 PM-9 Risk Management Strategy
💼 NIST SP 800-53 Revision 5 → 💼 PM-30 Supply Chain Risk Management Strategy	1

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags