ID.RM-1

Standard

Standard Version

NIST CSF

(v1.1)

Risk Management Strategy (ID.RM): The organization’s priorities, constraints, risk tolerances, and assumptions are established and used to support operational risk decisions.

Risk management processes are established, managed, and agreed to by organizational stakeholders