FFIEC Cybersecurity Assessment Tool (CAT)
Domain 1: Cyber Risk Management and Oversight – FFIEC Cybersecurity Assessment Tool (CAT)

FFIEC Cybersecurity Assessment Tool (CAT) D1.RM.RMP.A.3: Risk Management Program (Advanced 3)

What does D1.RM.RMP.A.3 require?

Independent risk management staff escalate significant discrepancies from business units' own assessments of cyber risk to management and to the board or its committee.

Maintained by Gerard BlokdykControl text last updated

Other controls in Domain 1: Cyber Risk Management and Oversight – FFIEC Cybersecurity Assessment Tool (CAT)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.