Do you have a formalized Risk Governance Plan that defines Enterprise Risk Management program requirements?
Not necessary. IT security policies, incident management, regular external security testing, and extended liability and cyber insurance are in place.
Last update 11 months ago