---

id: "GV.PO-02" title: "Cybersecurity Policy" function: "GV" function_name: "Govern" category: "GV.PO" category_name: "Cybersecurity Policy" description: "Cybersecurity processes and procedures are established, documented, and maintained." controls: - PL-1 - PL-2 - PM-1 - PM-11 - PM-2 - PM-3

---

GV.PO-02: Cybersecurity Policy

Description

Cybersecurity processes and procedures are established, documented, and maintained.

Category Context

Function: GV — Govern Category: GV.PO — Cybersecurity Policy

Cybersecurity policies, processes, and procedures are established and maintained.

Mapped SP 800-53 Controls

• PL-1 (Planning) — View Control
• PL-2 (Planning) — View Control
• PM-1 (Program Management) — View Control
• PM-11 (Program Management) — View Control
• PM-2 (Program Management) — View Control
• PM-3 (Program Management) — View Control