Skip to main content
MuonPartners
Services
Architecture

Solution design and technology roadmapping

Solution AssessmentTechnology RoadmapsIntegration DesignSolution ArchitectureTechnical Design
Cyber Security

Security assessments, IAM, and compliance

AssessmentsIAMComplianceSecurity BaselineCyber Innovation
Network and Platform

Network architecture and cloud platforms

Network DesignCloud StrategyModernisation
Enterprise Architecture

Business-technology alignment

Business AlignmentPortfolio AnalysisGovernance
View all services
ProjectsCase StudiesInsightsToolsAbout
Contact Us

Services

Architecture
Solution AssessmentTechnology RoadmapsIntegration DesignSolution ArchitectureTechnical Design
Cyber Security
AssessmentsIAMComplianceSecurity BaselineCyber Innovation
Network and Platform
Network DesignCloud StrategyModernisation
Enterprise Architecture
Business AlignmentPortfolio AnalysisGovernance
ProjectsCase StudiesInsightsToolsAboutContact
Get in Touch
MuonPartners

Strategic technology consulting for Australian organisations navigating complexity.

Services

  • Architecture
  • Cyber Security
  • Network and Platform
  • Enterprise Architecture

Company

  • About
  • Products
  • Frameworks
  • Cross-Framework Mapping
  • Projects
  • Case Studies
  • Insights
  • Contact

Contact

  • [email protected]
  • Australia
  • LinkedIn

© 2026 Muon Partners. All rights reserved.

ABN 50 669 022 315 · A Muon Group company.

Privacy PolicyTerms of Service
  1. Frameworks
  2. >C2M2
  3. >Risk Management
  4. >Risk Management - Objective 1
  5. >C2M2-RISK-1B
C2M2-RISK-1BActive

A strategy for cyber risk management is established and maintained in alignment with the organization’s cybersecurity program strategy (PROGRAM-1b) and enterprise architecture

Statement

A strategy for cyber risk management is established and maintained in alignment with the organization’s cybersecurity program strategy (PROGRAM-1b) and enterprise architecture

Location

Domain
Risk Management
Objective
Risk Management - Objective 1

Practice Details

Identifier
C2M2-RISK-1B
Domain
Risk Management
Objective
Objective 1
Maturity Level
MIL-2

Help Text

The risk management strategy is kept current and relevant. A risk management strategy focused on mitigating risks of procured software, for example, will likely be out of step with a cybersecurity program goal of increasing internally developed software and an enterprise architecture goal implementing a secure development process.

Related Practices · Dependency: Implementing this practice depends upon prior implementation of PROGRAM-1b. · Progression: This practice is part of a practice progression. Practice progressions are groups of related practices that represent increasingly complete or more advanced implementations of an activity. The practices in this progression include: RISK-1a, RISK-1b, RISK-1c, RISK-1g, RISK-1h.

AESCSF
AESCSF-RISK-1bequivalentvia derived-shared-practice-structure
View in graphReport an issue
← Back to Risk Management - Objective 1
Risk Management - Objective 18 controls
C2M2-RISK-1AThe organization has a strategy for cyber risk management, which may be developed and managed in an ad hoc mannerC2M2-RISK-1BA strategy for cyber risk management is established and maintained in alignment with the organization’s cybersecurity program strategy (PROGRAM-1b) and enterprise architectureC2M2-RISK-1CThe cyber risk management program is established and maintained to perform cyber risk management activities according to the cyber risk management strategyC2M2-RISK-1DInformation from RISK domain activities is communicated to relevant stakeholdersC2M2-RISK-1EGovernance for the cyber risk management program is established and maintainedC2M2-RISK-1FSenior management sponsorship for the cyber risk management program is visible and activeC2M2-RISK-1GThe cyber risk management program aligns with the organization's mission and objectivesC2M2-RISK-1HThe cyber risk management program is coordinated with the organization’s enterprise-wide risk management program