GOV-01 Executive cyber security accountability
1 action under this Govern principle in ASD Essentials for enterprise IT. Each action links to plain-English guidance, audit tips and cross-framework mappings.
ASD principle statement
The board of directors or executive committee is accountable for cyber security.
Quoted as published. Everything else on this page is written by Control Stack.
- Function
- Govern
- Domains
The action
- IT.GOV-01.1Formalise Executive and Board Accountability for Cyber Security and Risk Appetite
Defines and regularly reviews formal executive and board accountability for cyber security, including setting, monitoring and adjusting how much risk to accept.
Domains:Governance and culture
Back to the full Essentials for enterprise IT action list, or browse the complete control library.