GV.PO Policy

Policy: establishing the cybersecurity risk management policy and keeping it reviewed and updated; two Subcategories.

GV.PO-01 Cybersecurity policy established

Creating the cybersecurity risk management policy from organizational context and strategy, getting senior management approval, communicating it and collecting staff acknowledgments.

GV.PO-02 Policy reviewed and updated

Keeping the policy current: periodic reviews and updates driven by risk management results and by changes in law, threats, technology (such as adopting AI) and the business.

Talk to our team.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.

  • 30-minute call: free, with no obligation.
  • NDA on request: we can sign before you share details.
  • Clear next steps: a scope and plan after the call.
Book a callhello@deployopen.com