Identify 2.2.3 Governance Governance determines responsibilities, monitors, and ensures compliance with regulatory, legal and operational requirements from the business environment. Description Task ID.GV-1 Issue information security requirements for your business. ID.GV-2 Information security roles and responsibilities are coordinated with internal roles (e.g. those in risk management) and external partners. ID.GV-3 Ensure that your organisation complies with all statutory and regulatory cybersecurity requirements, including those applicable to data protection. ID.GV-4 Ensure that cybersecurity risks are embedded in business-wide risk management structures. Table 7: ID.GV tasks Standard Reference COBIT 5 APO01.03, EDM01.01, EDM01.02, APO13.02, MEA03.01, MEA03.04, DSS04.02 ISA 62443-3:2013 ISO 27001:2013 A.5.1.1, A.6.1.1, A.7.2.1, A.18.1 NIST-SP-800-53 Rev. 4 PM-1, PS-7, PM-9, PM-11 BSI 100-2 M 2.192, M 2.193, M 2.336, B 1.16 Table 8: ID.GV references Minimum ICT standard 2018 17