ID.RA-6

Standard

Standard Version

NIST CSF

(v1.1)

Risk Assessment (ID.RA): The organization understands the cybersecurity risk to organizational operations (including mission, functions, image, or reputation), organizational assets, and individuals.

Risk responses are identified and prioritized