Compliancemanzill.com
NIST 800-53 rev.5

NIST 800-53 rev.5/Program Management/573 of 1011

PM-28Risk Framing

Control family: Program Management

Control description

a. Identify and document:

1. Assumptions affecting risk assessments, risk responses, and risk monitoring;

2. Constraints affecting risk assessments, risk responses, and risk monitoring;

3. Priorities and trade-offs considered by the organization for managing risk; and

4. Organizational risk tolerance;

b. Distribute the results of risk framing activities to [Assignment: organization-defined personnel]; and

c. Review and update risk framing considerations [Assignment: organization-defined frequency].

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.