RA.L3-3.11.5e

Assess the effectiveness of security solutions at least annually or upon receipt of relevant cyber threat information, or in response to a relevant cyber incident, to address anticipated risk to organizational systems and the organization based on current and accumulated threat intelligence.

至少每年或接收到相关网络威胁信息、或针对相关网络事件作出响应时，评估安全解决方案的有效性，以应对基于当前及累积威胁情报所预见的对组织系统及组织的风险。