New Zealand Information Security Manual (NZISM)
Chapter 3: Information security governance - roles and responsibilities – New Zealand Information Security Manual (NZISM)

New Zealand Information Security Manual (NZISM) 3.2.12.C.03: 3.2.12.C.03 Consistent risk analysis and acceptable risk levels

The CISO should work alongside business teams to facilitate the analysis and management of security risk, including setting acceptable levels of risk in a consistent way across the agency.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Chapter 3: Information security governance - roles and responsibilities – New Zealand Information Security Manual (NZISM)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll New Zealand Information Security Manual (NZISM) controls