Cybersecurity program activities are periodically reviewed to ensure that they align with the cybersecurity program strategy
Context and Guidance: There should be a process in place to periodically evaluate cybersecurity program activities to ensure that they continue to support the goals and objectives of the cybersecurity program strategy. Activities that don’t contribute to the accomplishment of those goals and objectives should be evaluated to determine whether they should be continued. Any gaps in fulfillment of the objectives should also be addressed.
Related Practices • Input From: Implementing PROGRAM-1b provides input that may be useful for implementing this practice. • Progression: This practice is part of a practice progression. Practice progressions are groups of related practices that represent increasingly complete or more advanced implementations of an activity. The practices in this progression include: PROGRAM-2b, PROGRAM-2g, PROGRAM-2h, PROGRAM-2i.