top of page

Principle 4

RISK-BASED STRATEGY AND EXECUTION

Monitor on an Ongoing Basis

< Back To Framework

The execution of the cyber risk treatment plan should be monitored on an ongoing basis with established performance indicators and operational metrics.

2023 NACD Director’s Handbook on Cyber-Risk Oversight Principle 5

2023 Draft NIST CSF 2.0 GV.OV

2017 AICPA CRMP Description Criteria DC15, DC16

bottom of page