Canada ITSG-33 - IT Security Risk Management
Annex 1: Departmental IT security risk management activities – Canada ITSG-33 - IT Security Risk Management

Canada ITSG-33 - IT Security Risk Management A1-4.2.7.4: 4.2.7.4 Approve the departmental security control profiles

What does A1-4.2.7.4 require?

The IT security coordinator reviews the completed profiles, confirms they meet the security needs and control objectives, address the threats and balance controls against acceptable residual risk, and seeks approval from departmental authorities (program and service delivery managers, the departmental security officer and the deputy head as required). The security officer includes the business needs, control objectives and required controls in the departmental security plan for the deputy head's approval.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Annex 1: Departmental IT security risk management activities – Canada ITSG-33 - IT Security Risk Management

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Canada ITSG-33 - IT Security Risk Management controls