PM-29 Risk Management Program Leadership Roles
Not in a baseline
Review PM-29
1. Set its parameters
No parameters to set for PM-29.
2. Record its status
a.Appoint a Senior Accountable Official for Risk Management to align organizational information security and privacy management processes with strategic, operational, and budgetary planning processes; and
b.Establish a Risk Executive (function) to view and analyze risk from an organization-wide perspective and ensure management of risk is consistent across the organization.
Discussion
The senior accountable official for risk management leads the risk executive (function) in organization-wide risk management activities.
ISO/IEC 27001:2022 Crosswalk
5.15.39.3.1*A.5.2
* does not fully satisfy the intent of this control (per NIST's mapping notes).