graphgrc

SCF - GOV-05.2 - Key Risk Indicators (KRIs)

Mechanisms exist to develop, report and monitor Key Risk Indicators (KRIs) to assist senior management in performance monitoring and trend analysis of the cybersecurity & data privacy program.

Mapped framework controls

SOC 2

Control questions

Does the organization develop, report and monitor Key Risk Indicators (KRIs) to assist senior management in performance monitoring and trend analysis of the cybersecurity & data privacy program?