GOVERN 1.3
Objective
Processes, procedures, and practices are in place to determine the needed level of risk management activities based on the organization’s risk tolerance.
Incidents linked to this control
From automatic embedding match (not a formal assessment).