ComplianceNIST 800-53 control
NIST-PM-29 Risk Management Program Leadership Roles
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- PM Program Management
- Control
- PM-29
Control statement
a. Appoint a Senior Accountable Official for Risk Management to align organizational information security and privacy management processes with strategic, operational, and budgetary planning processes; and
b. Establish a Risk Executive (function) to view and analyze risk from an organization-wide perspective and ensure management of risk is consistent across the organization.
Discussion
The senior accountable official for risk management leads the risk executive (function) in organization-wide risk management activities.
Related
Related control · Compliance (2)
- NIST-PM-19 Privacy Program Leadership Role NIST 800-53 control
- NIST-PM-2 Information Security Program Leadership Role NIST 800-53 control
Referenced by Compliance · has member (1)
- NIST-PM Program Management NIST 800-53 family