Review the information risk register as senior information risk owner

Information governance, information security and data protection officer: Review the information risk register as senior information risk owner. Starts when: Quarterly. Steps: Open the register; Owners update; Accept or treat risks; Report to the board. Done when: Every information risk shows an owner, treatment and review date. Rules that apply: NCSC Cyber Assessment Framework.

Sign in with EDGE ID