gov-052-keyriskindicatorskris.md

SCF - GOV-05.2 - Key Risk Indicators (KRIs)

Mechanisms exist to develop, report and monitor Key Risk Indicators (KRIs) to assist senior management in performance monitoring and trend analysis of the cybersecurity & data privacy program.

Mapped framework controls

SOC 2

• CC1.2
• CC1.5
• CC2.2
• CC4.1

Control questions

Does the organization develop, report and monitor Key Risk Indicators (KRIs) to assist senior management in performance monitoring and trend analysis of the cybersecurity & data privacy program?