Cybersecurity Organizational Structure And Related Roles And Responsibilities Must Be Defined, Documented, Approved, Supported And Assigned By The Authorizing Official While Ensuring That This Does Not Result In A Conflict Of Interest

The Cybersecurity Roles And Responsibilities Must Be Reviewed Periodically According To Planned Intervals Or Upon Changes To Related Laws And Regulations.