Is your cybersecurity risk management function integrated into your organization's enterprise risk management (ERM) processes?

This question assesses whether cybersecurity risks are managed as part of the broader organizational risk landscape rather than in isolation. Effective integration ensures cybersecurity considerations influence strategic business decisions, resource allocation, and risk acceptance thresholds across the enterprise. Evidence could include documentation showing cybersecurity representation in ERM committee meetings, risk registers that incorporate cybersecurity risks alongside other business risks, or formal governance documentation defining how cybersecurity risk management interfaces with enterprise risk management processes.