---

id: "GV.OV-02" title: "Oversight" function: "GV" function_name: "Govern" category: "GV.OV" category_name: "Oversight" description: "Cybersecurity oversight is conducted by appropriate governance bodies." controls: - CA-1 - CA-2 - CA-5 - CA-7 - PM-1 - PM-3 - PM-6 - PM-9

---

GV.OV-02: Oversight

Description

Cybersecurity oversight is conducted by appropriate governance bodies.

Category Context

Function: GV — Govern Category: GV.OV — Oversight

Cybersecurity risk management activities are monitored, reviewed, and reported.

Mapped SP 800-53 Controls

• CA-1 (Assessment, Authorization, and Monitoring) — View Control
• CA-2 (Assessment, Authorization, and Monitoring) — View Control
• CA-5 (Assessment, Authorization, and Monitoring) — View Control
• CA-7 (Assessment, Authorization, and Monitoring) — View Control
• PM-1 (Program Management) — View Control
• PM-3 (Program Management) — View Control
• PM-6 (Program Management) — View Control
• PM-9 (Program Management) — View Control