GV.OV-01:

Cybersecurity risk management strategy outcomes are reviewed to inform and adjust strategy and direction

Implementation Examples

Ex1:

Measure how well the risk management strategy and risk results have helped leaders make decisions and achieve organizational objectives

Ex2: 

Examine whether cybersecurity risk strategies that impede operations or innovation should be adjusted