Cybersecurity Risk
What is Cybersecurity Risk?
The potential for financial loss, operational disruption, or reputational damage resulting from the failure of digital technologies and cyber threats.
Terms that appear alongside cybersecurity risk
Each of these is named in at least one of the same controls as cybersecurity risk. The number is how many controls name both.
- cybersecurity 65 shared controls
- risk assessment 19 shared controls
- governance 10 shared controls
- risk treatment 5 shared controls
- compliance 4 shared controls
- vulnerability 4 shared controls
- access control 4 shared controls
- crisis management 4 shared controls
Frameworks that govern cybersecurity risk
What the standards actually require on cybersecurity risk
Requirements naming cybersecurity risk across 6 standards, quoted from the control text.
The organizational mission is understood and informs cybersecurity risk management
NIST-CSF-GV.OC-01 · The organizational mission is understood and informs cybersecurity risk management →CSF 2.0 outcome: cybersecurity risk management activities and outcomes are included in enterprise risk management processes. Priority Medium.
nist-sp-800-61-rev-3::GV.RM-03 · GV.RM-03 Incident decisions informed by enterprise risk, not cybersecurity risk alone →The cybersecurity department identifies, documents and approves the cybersecurity risk management methodology and procedures, taking account of the confidentiality, integrity and availability of information and technology assets.
saudi-nca-ecc::1-5-1 · 1-5-1 Cybersecurity risk management methodology →Article 25 establishes the MEMBER STATE cybersecurity risk assessment - the third level of the four-level cascade. Member State competent authorities conduct national cybersecurity risk assessments for their in-scope electricity entities, building on the Union...
NCCS-Art.25_26 · Member State cybersecurity risk assessment (NCCS Articles 25-26) - third level of the cascade →It must describe any known or foreseeable circumstance, in intended use or reasonably foreseeable misuse, that may lead to significant cybersecurity risks.
eu-cyber-resilience-act::Annex II 5 · User information: circumstances that may lead to significant cybersecurity risks →The entity has to be able to say whether its measures work, not merely that they exist. That calls for a defined assessment approach with a schedule, someone sufficiently independent of the people who operate the control doing the assessing, criteria for what...
nis2-directive::Art.21.2.f · Policies and procedures to assess the effectiveness of the cybersecurity risk-management measures →Questions people ask about cybersecurity risk
What is Cybersecurity Risk?
Why is Cybersecurity Risk important for compliance?
Which compliance frameworks address Cybersecurity Risk?
Where can I learn more about Cybersecurity Risk?
See how Cybersecurity Risk applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.