RSK-12
Risk Culture
Description
Mechanisms exist to ensure teams are committed to a culture that considers and communicates technology-related risk.
Control Question
Does the organization ensure teams are committed to a culture that considers and communicates technology-related risk?
Control Metadata
Domain:
Risk Management
Validation Cadence:
Annual
Evidence Request List:
E-RSK-01