What does D1.G.Ov.B.3 require?

At least once a year management gives the board or its committee a written report on the overall state of the information security and business continuity programs.

FFIEC Cybersecurity Assessment Tool (CAT) D1.G.Ov.B.3...

Other controls in Domain 1: Cyber Risk Management and Oversight – FFIEC Cybersecurity Assessment Tool (CAT)

D1.G.IT.A.1 D1.G.IT.A.1 IT Asset Management (Advanced 1)
D1.G.IT.A.2 D1.G.IT.A.2 IT Asset Management (Advanced 2)
D1.G.IT.A.3 D1.G.IT.A.3 IT Asset Management (Advanced 3)
D1.G.IT.A.4 D1.G.IT.A.4 IT Asset Management (Advanced 4)
D1.G.IT.B.1 D1.G.IT.B.1 IT Asset Management (Baseline 1)
D1.G.IT.B.2 D1.G.IT.B.2 IT Asset Management (Baseline 2)
D1.G.IT.B.3 D1.G.IT.B.3 IT Asset Management (Baseline 3)
D1.G.IT.B.4 D1.G.IT.B.4 IT Asset Management (Baseline 4)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All FFIEC Cybersecurity Assessment Tool (CAT) controls