3 docs tagged with "CISO"

Responsibilities of Executive Management in SbD-ToE

Eight key risk indicators for reporting to the CISO, senior management and the board. Focus on risk exposure and response capability, aggregating the technical indicators of the SbD-ToE domains into an actionable executive reading.

Organisational policy that defines the requirements for the definition, collection, analysis and reporting of security governance KPIs, including metric categories, reporting cadence, responsibilities, intervention thresholds and integration with maturity frameworks (SAMM, SSDF), proportionate to the criticality level (L1, L2, L3).