Compliancemanzill.com
NIST 800-53 rev.5

NIST 800-53 rev.5/Program Management/574 of 1011

PM-29Risk Management Program Leadership Roles

Control family: Program Management

Control description

a. Appoint a Senior Accountable Official for Risk Management to align organizational information security and privacy management processes with strategic, operational, and budgetary planning processes; and

b. Establish a Risk Executive (function) to view and analyze risk from an organization-wide perspective and ensure management of risk is consistent across the organization.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.