Has your organization formally identified and documented areas of alignment and overlap between cybersecurity and enterprise risk management frameworks?

This question assesses whether the organization has systematically analyzed how cybersecurity risks integrate with broader enterprise risk management (ERM) processes. Identifying these alignments helps ensure cybersecurity risks are properly considered within the organization's overall risk appetite and management approach, rather than being treated in isolation. Evidence could include a mapping document or matrix that shows how cybersecurity risk categories correspond to enterprise risk categories, shared risk assessment methodologies, or documentation showing how cybersecurity metrics and KPIs feed into enterprise risk reporting structures.