Canada ITSG-33 - IT Security Risk Management
Annex 1: Departmental IT security risk management activities – Canada ITSG-33 - IT Security Risk Management

Canada ITSG-33 - IT Security Risk Management A1-4.3.2: 4.3.2 Deploy security controls in information systems

What does A1-4.3.2 require?

The IT security coordinator promulgates the departmental profiles and threat assessment reports to the communities that build and run information systems (for example through bulletins, steering committees or review boards) and informs program and service delivery managers and security assessors, who mandate the right profile for projects and operations groups in their area. Projects and operations groups then implement and operate the controls following Annex 2.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Annex 1: Departmental IT security risk management activities – Canada ITSG-33 - IT Security Risk Management

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Canada ITSG-33 - IT Security Risk Management controls