SOC for Cybersecurity - Cybersecurity Risk Management Examination
Nature of business, information at risk and objectives (DC1 to DC4) – SOC for Cybersecurity - Cybersecurity Risk Management Examination

SOC for Cybersecurity - Cybersecurity Risk Management Examination DC4: Process for establishing, maintaining and approving cybersecurity objectives

What does DC4 require?

Describe how cybersecurity objectives are set from business and strategic objectives, how board or executive approval is obtained, and which security management and control frameworks (for example the NIST Cybersecurity Framework, ISO/IEC 27001 and 27002, or an internal combination) are used to set objectives and to develop and maintain controls.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Nature of business, information at risk and objectives (DC1 to DC4) – SOC for Cybersecurity - Cybersecurity Risk Management Examination

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll SOC for Cybersecurity - Cybersecurity Risk Management Examination controls