T/CESA 1077-2020 Information Technology Services Governance IT Risk Governance
T/CESA 1077-2020
Basic Information
Scope
Main technical content: This standard stipulates the general principles of risk governance, the risk governance framework, top-level design, the risk governance environment, the governance of the risk management system, the governance of elements, and the risk governance process, etc. This standard is applicable to: a) the implementation of IT risk governance top-level design functions by organizational governance entities; b) the establishment or improvement of an organization's IT risk governance system; c) the clarification of relevant requirements in the organization's IT risk governance process; d) the standardization of the organization's IT risk governance business operations and the construction of related platforms; e) guidance for third-party or other relevant institutions in conducting IT risk governance consulting services