CISA Cyber Resilience Review (CRR) v4.0 RM.1: A strategy for identifying, analysing and mitigating risks is developed

What does RM.1 require?

The sources of operational risk are identified, risk categories are set, a plan for managing operational risk exists and has been communicated to stakeholders.

Maintained by Gerard Blokdyk

Other controls in Risk Management – CISA Cyber Resilience Review (CRR) v4.0

RM.2 Risk tolerances are identified and the focus of risk management activities is established
RM.3 Risks are identified
RM.4 Risks are analysed and assigned a disposition
RM.5 Risks to assets and services are mitigated and controlled

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All CISA Cyber Resilience Review (CRR) v4.0 controls