Skip to main content

💼 GV.OC-01: The organizational mission is understood and informs cybersecurity risk management

  • ID: /frameworks/nist-csf-v2.0/gv-oc/01

Description​

Share the organization's mission (e.g., through vision and mission statements, marketing, and service strategies) to provide a basis for identifying risks that may impede that mission.

Similar​

  • Sections
    • /frameworks/nist-csf-v1.1/id-be/02
    • /frameworks/nist-csf-v1.1/id-be/03
    • /frameworks/nist-sp-800-53-r5/pm/11

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 NIST CSF v1.1 → 💼 ID.BE-2: The organization's place in critical infrastructure and its industry sector is identified and communicatedno data
💼 NIST CSF v1.1 → 💼 ID.BE-3: Priorities for organizational mission, objectives, and activities are established and communicatedno data
💼 NIST SP 800-53 Revision 5 → 💼 PM-11 Mission and Business Process Definitionno data

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance