CSB Has Effective "Identify" and "Recover" Information Security Functions, but Attention Is Needed in Other Information Security Function Areas
More work is needed by CSB to achieve an overall managed and measurable information security program that can effectively manage cybersecurity risks.