Compliancemanzill.com
NIST CSF

NIST CSF/Identify/23 of 108

ID.RM-2Risk Management Strategy (ID.RM): The organization’s priorities, constraints, risk tolerances, and assumptions are established and used to support operational risk decisions.

Control family: Identify

Control description

Organizational risk tolerance is determined and clearly expressed

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.