Does your organization integrate cybersecurity risk management into its enterprise risk management framework?

This question assesses whether cybersecurity risks are evaluated and managed alongside other business risks such as financial, operational, compliance, and reputational risks, rather than being handled in isolation. Integrating cybersecurity into the broader risk management framework ensures consistent risk evaluation, prioritization, and resource allocation across the organization. Evidence could include an enterprise risk register that incorporates cybersecurity risks, meeting minutes from risk committee discussions that address cybersecurity alongside other risks, or a documented risk management framework that explicitly includes cybersecurity risk categories with the same assessment methodology used for other business risks.