Risk executive (function): Difference between revisions
imported>Unknown user No edit summary |
imported>Unknown user No edit summary |
||
(No difference)
| |||
Latest revision as of 00:24, 20 January 2026
Risk executive (function)
An individual or group within an organization that helps to ensure that: (i) security risk-related considerations for individual information systems, to include the authorization decisions for those systems, are viewed from an organization-wide perspective with regard to the overall strategic goals and objectives of the organization in carrying out its missions and business functions; and (ii) managing risk from individual information systems is consistent across the organization, reflects organizational risk tolerance, and is considered along with other organizational risks affecting mission/business success.
Source: NIST SP 800-128 | Category: