Senior management sponsorship for the cybersecurity program is visible and active
Context and Guidance: Visible and active sponsorship by senior management might include regular communications by senior management about the importance and value of cybersecurity activities, organisational support for establishing and implementing policies or other organisational directives to guide the program, funding awards and recognition programs for staff who make significant contributions toward achieving cybersecurity objectives, and ensuring that cybersecurity concepts are included in contracts with suppliers and business partners.
Related Practices • Progression: This practice is part of a practice progression. Practice progressions are groups of related practices that represent increasingly complete or more advanced implementations of an activity. The practices in this progression include: PROGRAM-2a, PROGRAM-2c, PROGRAM-2d.