Senior management sponsorship for the cyber risk management program is visible and active
Context and Guidance: Visible and active sponsorship by senior management might include regular communications by senior management about the importance and value of the cyber risk program, organisational support for establishing and implementing governance for managing cyber risk, and funding awards and recognition programs for staff who make significant contributions toward achieving cybersecurity objectives.
Related Practices • Progression: This practice is part of a practice progression. Practice progressions are groups of related practices that represent increasingly complete or more advanced implementations of an activity. The practices in this progression include: RISK-1e, RISK-1f.