The cybersecurity risk management strategy is reviewed and adjusted to ensure coverage of organizational requirements and risks