Mechanisms exist to categorize applicable security and resiliency requirements for products and/or services with digital elements.
Does the organization categorize applicable security and resiliency requirements for products and/or services with digital elements?