New Zealand Information Security Manual (NZISM)
Chapter 3: Information security governance - roles and responsibilities – New Zealand Information Security Manual (NZISM)

New Zealand Information Security Manual (NZISM) 3.3.10.C.04: 3.3.10.C.04 Assess and report threats, vulnerabilities and residual risk

ITSMs should assess threats, vulnerabilities and residual security risks, report on them, and recommend remedial action.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Chapter 3: Information security governance - roles and responsibilities – New Zealand Information Security Manual (NZISM)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.