Verificação de saúde - Gerenciamento de risco cibernético

a. Seus objetivos cibernéticos

1. Você entende os serviços de negócios críticos que criam valor para sua organização e identificou/definiu os processos críticos, dados e tecnologia (aplicativos e ativos de nuvem/infraestrutura) que os sustentam. 

   Discordo fortemente Concordo totalmente

   Por favor, faça um Seleção

   1

   2

   3

   4

   5

   N/A

   N/A || 942

2. Your cyber risk appetite is defined in specific, objective and measurable terms. For example, you have defined the levels of financial, operational, reputational and compliance-related impact that you’re prepared to tolerate. 

   Discordo fortemente Concordo totalmente

   Por favor, faça um Seleção

   1

   2

   3

   4

   5

   N/A

   N/A || 1012

3. Your enterprise-level cyber risks are defined in business-outcome terms, and you have a sensible number of cyber risks that are reported on. (Hint: One is too few to distinguish between the different outcomes possible from a cyber-attack, >10 is too many to digest and manage at the executive level).  

   Discordo fortemente concordo totalmente

   Por favor, faça um selection

   1

   2

   3

   4

   5

   N/A

   N/A

4. You have clearly defined target risk positions for each of your cyber risks that are understood and endorsed by your senior leadership team (your Equipe e quadro executivos). Seleção

   Strongly disagree Strongly agree

   Please make a selection

   1

   2

   3

   4

   5

   N/A

   N/A || 1152

5. You have a clearly defined and funded cyber strategy and roadmap that sets-out the major control remediation initiatives required to achieve your target risk positions, as well as how and when you will deliver them. 

   Discordo totalmente Concordo totalmente

   Por favor, faça um Seleção

   1

   2

   3

   4

   5

   N/A

   N/A

6. sua estratégia cibernética é explicada 

   Discordo fortemente Concordo totalmente

   Por favor, faça um Seleção

   1

   2

   3

   4

   5

   N/A

   N/A || 1307