← NIST CSF 2.0 in plain English

GV.OC-02

Govern / Organizational Context

Internal and external stakeholders are understood, and their needs and expectations regarding cybersecurity risk management are understood and considered.

Think of it likeConsidering the needs of everyone in the household when making safety plans.

In plain English

The family understands what each member needs to feel safe and considers these needs when making decisions.