Australian Energy Sector Cyber Security Framework (AESCSF)
Risk management (RISK) – Australian Energy Sector Cyber Security Framework (AESCSF)

Australian Energy Sector Cyber Security Framework (AESCSF) RISK-AP1: Anti-pattern: identified risks not periodically reviewed

What does RISK-AP1 require?

This anti-pattern is present when identified cyber risks are not reviewed at regular intervals through risk governance, for example to validate inherent and residual ratings and treatment progress; to attain the level it must be absent.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Risk management (RISK) – Australian Energy Sector Cyber Security Framework (AESCSF)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Australian Energy Sector Cyber Security Framework (AESCSF) controls