Establish Management Body Accountability for Cybersecurity
What this control requires
Ensure management body members receive cybersecurity training proportionate to their oversight responsibilities. Management body must approve cybersecurity risk management measures and monitor their implementation. Designate a cybersecurity responsible function at management body level. Document management body involvement in cybersecurity governance.
Other NIS2 controls
EU_NIS2-CTRL-001 - Daily safeguarding reconciliationEU_NIS2-CTRL-002 - Critical ICT incident reportingEU_NIS2-CTRL-003 - GDPR breach notification workflowEU_NIS2-CTRL-004 - AML suspicious transaction monitoringEU_NIS2-CTRL-005 - Quarterly PCI vulnerability assessmentEU_NIS2-CTRL-006 - Outsourcing provider oversightEU_NIS2-CTRL-007 - DORA Register of Information maintenanceEU_NIS2-CTRL-008 - CTIF suspicious activity escalationEU_NIS2-CTRL-009 - NIS2 cyber resilience testingEU_NIS2-CTRL-010 - Instant payment availability monitoringNIS2-A20-001 - Management Body Cybersecurity Training and OversightNIS2-A21-001 - NIS2 Cybersecurity Risk Management Measures