Canada ITSG-33 - IT Security Risk Management
Annex 2: ISSIP stakeholder engagement, concept and planning phases – Canada ITSG-33 - IT Security Risk Management

Canada ITSG-33 - IT Security Risk Management A2-3.1.1: 3.1.1 Identify and engage security stakeholders

At initiation the project identifies and engages its security stakeholders so that funding, reviews and authorization are secured from the start: the program and service delivery manager who will rely on the system and is usually the authorizer (accepting the risk of relying on it), the enterprise security architect or the CIO or CTO acting in that role, any external security assessor such as a certification authority (whose commitment and assessment scope are fixed now), and the IT operational authority.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Annex 2: ISSIP stakeholder engagement, concept and planning phases – Canada ITSG-33 - IT Security Risk Management

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Canada ITSG-33 - IT Security Risk Management controls