💼 Risk Management Strategy (ID.RM)

• Contextual name: 💼 Risk Management Strategy (ID.RM)
• ID: /frameworks/nist-csf-v1.1/id-rm
• Located in: 💼 NIST CSF v1.1

Description

The organization's priorities, constraints, risk tolerances, and assumptions are established and used to support operational risk decisions.

Similar

• Internal
  • ID: dec-b-9840777b

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags
💼 ID.RM-1: Risk management processes are established, managed, and agreed to by organizational stakeholders
💼 ID.RM-2: Organizational risk tolerance is determined and clearly expressed
💼 ID.RM-3: The organization's determination of risk tolerance is informed by its role in critical infrastructure and sector specific risk analysis