New Zealand Information Security Manual (NZISM)
Chapter 5: Information security documentation – New Zealand Information Security Manual (NZISM)

New Zealand Information Security Manual (NZISM) 5.3.6.C.01: Identify agency and system specific security risks

What does 5.3.6.C.01 require?

Agencies should identify security risks particular to the agency and to each system that might justify controls beyond those set out in this manual.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Chapter 5: Information security documentation – New Zealand Information Security Manual (NZISM)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll New Zealand Information Security Manual (NZISM) controls